From f0a4517a179e027b27300785a43f58de015c5bc7 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 20:51:46 +0000
Subject: [PATCH] Publish Advisories

GHSA-7ccv-hhvc-62hg
GHSA-qqg7-gcxw-gmj3
---
 .../GHSA-7ccv-hhvc-62hg.json                  | 40 ++++++++++++++++---
 .../GHSA-qqg7-gcxw-gmj3.json                  | 39 +++++++++++++++---
 2 files changed, 67 insertions(+), 12 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json (60%)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json (58%)

diff --git a/advisories/unreviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json b/advisories/github-reviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json
similarity index 60%
rename from advisories/unreviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json
rename to advisories/github-reviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json
index d0684574110..32d721a95db 100644
--- a/advisories/unreviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json
+++ b/advisories/github-reviewed/2022/05/GHSA-7ccv-hhvc-62hg/GHSA-7ccv-hhvc-62hg.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7ccv-hhvc-62hg",
-  "modified": "2025-04-12T12:58:19Z",
+  "modified": "2025-04-14T20:49:35Z",
   "published": "2022-05-17T03:57:19Z",
   "aliases": [
     "CVE-2015-0266"
   ],
+  "summary": "Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs",
   "details": "The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs.",
   "severity": [
     {
@@ -13,7 +14,27 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.ranger:ranger"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.5.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
@@ -23,6 +44,10 @@
       "type": "WEB",
       "url": "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/ranger"
+    },
     {
       "type": "WEB",
       "url": "https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E"
@@ -33,7 +58,7 @@
     },
     {
       "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/76221"
+      "url": "https://web.archive.org/web/20200228073944/http://www.securityfocus.com/bid/76221"
     },
     {
       "type": "WEB",
@@ -41,10 +66,13 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-639",
+      "CWE-863"
+    ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-14T20:49:35Z",
     "nvd_published_at": "2016-04-11T19:59:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json b/advisories/github-reviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json
similarity index 58%
rename from advisories/unreviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json
rename to advisories/github-reviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json
index 859ca4b4fa8..989ce7a5491 100644
--- a/advisories/unreviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json
+++ b/advisories/github-reviewed/2022/05/GHSA-qqg7-gcxw-gmj3/GHSA-qqg7-gcxw-gmj3.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qqg7-gcxw-gmj3",
-  "modified": "2025-04-12T12:58:23Z",
+  "modified": "2025-04-14T20:50:42Z",
   "published": "2022-05-17T03:57:16Z",
   "aliases": [
     "CVE-2015-5167"
   ],
+  "summary": "Apache Ranger allows users to bypass intended access restrictions via the REST API",
   "details": "The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.",
   "severity": [
     {
@@ -13,7 +14,27 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.ranger:ranger"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.5.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
@@ -23,6 +44,10 @@
       "type": "WEB",
       "url": "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/ranger"
+    },
     {
       "type": "WEB",
       "url": "https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E"
@@ -33,14 +58,16 @@
     },
     {
       "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/82871"
+      "url": "https://web.archive.org/web/20200501000000*/http://www.securityfocus.com/bid/82871"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-14T20:50:41Z",
     "nvd_published_at": "2016-04-12T14:59:00Z"
   }
 }
\ No newline at end of file