CVE-2025-59060 — Apache Ranger: Hostname verification bypass in NiFiRegistryClient

CVE-2025-59060

Apache Ranger: Hostname verification bypass in NiFiRegistryClient PUBLISHED

Description (CNA)

Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Ranger	affected 0 through 2.7.0

CWE

CWE-297

References

https://lists.apache.org/thread/c4plx81z3xs86vgl3fd95y3q7hhtff05

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/03/02/4

CISA-ADP

No English description supplied.

No references supplied.