[RANGER-3521] Ranger KMS IS NOT ENFORCING HSTS ON SSL PORT DEFINED BY RFC 6797

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Component/s: Ranger
• Assignee: Dhaval Shah
• Reporter: Dhaval Shah
• Created: 22/Nov/21 12:35
• Updated: 09/Dec/21 13:27
• Resolved: 09/Dec/21 13:27

Description

We found the vulnerability related to ranger KMS on SSL port.

Ranger KMS is not enforcing HSTS on SSL port defined by RFC 6797.

Issue Links

• links to: Review Request