Not rated
CVE-2016-6815 In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with…
Description
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Ranger 0.6 | 0.6.0 → 0.6.1 | No fix stated |
| Apache Ranger | 0.5.x | No fix stated |
References
- 94221 www.securityfocus.com
- cwiki.apache.org cwiki.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Ranger
The 23 CVEs of Apache Ranger →
CVE-2026-28672
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger
Not rated
CVE-2026-32227
SQL Injection vulnerability vulnerability in Apache Ranger
Not rated
CVE-2026-40920
Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0
Not rated
CVE-2026-42537
Remote Code Execution via JDBC URL Injection in Apache…
Not rated