Andrew Rukin (Arenadata)

Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user

Apache Ranger: UnixAuth lacks brute-force protection

Apache Ranger: Logs contain replayable JWT bearer tokens

Apache Ranger: Remote Code Execution via JDBC URL Injection

Apache Ranger: Privilege Escalation via URL Parameter

Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation

Apache Ranger: Download APIs expose plugin data without authentication

Apache Ranger: Clients accept TLS certificates issued for other hostnames

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)