CVE-2025-59060

Medium

Hostname verification bypass issue in Apache Ranger NiFiRegistryClient/NiFiClient is reported in Apache Ranger versions <= 2.7.0. Users…

apache·CWE-297·Published 2026-03-03

CVSS

5.3

EPSS

0.00

KEV

Exploits

Vendor statements (1)

lists.apache.org

cve.orgen

205 chars

Hostname verification bypass issue in Apache Ranger NiFiRegistryClient/NiFiClient is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

OSV.deven

205 chars

GHSAen

205 chars

NVDes

250 chars

Se informa de un problema de omisión de verificación de nombre de host en Apache Ranger NiFiRegistryClient/NiFiClient en versiones de Apache Ranger <= 2.7.0. Se recomienda a los usuarios actualizar a la versión 2.8.0, que soluciona este problema.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	GHSA	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N