Description
UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue.
CVSS 7.3EPSS 0.299%Risk 0.75
View source- Published
- 2026-08-10 11:17:27
- Last modified
- 2026-08-10 20:17:31
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L