CVE-2016-6815

MEDIUM6.5EPSS 0.49%

Moderate severity vulnerability that affects org.apache.ranger:ranger

Published: 10/17/2018Modified: 12/2/2024

Description

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References (4)