You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Abhishek Jain (Jira)" <ji...@apache.org> on 2025/02/13 07:54:00 UTC
[jira] [Created] (RANGER-5144) [Column Masking] : Exposing Data Secrecy by Displaying lowercase/uppercase patterns in Masked Column Data
Abhishek Jain created RANGER-5144:
-------------------------------------
Summary: [Column Masking] : Exposing Data Secrecy by Displaying lowercase/uppercase patterns in Masked Column Data
Key: RANGER-5144
URL: https://issues.apache.org/jira/browse/RANGER-5144
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 2.4.0
Reporter: Abhishek Jain
The data secrecy is exposed by displaying the lowercase/uppercase pattern when the column masking is applied.
Each uppercase letter in a string is masked with 'X' (capital 'X') and each lowercase letter is masked with 'x' (small 'x') which exposes the datapattern in that column.
{_}*Example*{_}:
{code:java}
ABHIshek -> XXXXxxxx
abhishek -> xxxxxxxx
{code}
The masking rule should be uniform for both lower/upper case letters.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)