Moderate severity vulnerability that affects org.apache.ranger:ranger

MEDIUM 6.5CVE-2016-6815 · GHSA-vhxc-8jjq-859j · Published 13/10/2017 · updated 17/06/2026

In short

CVE-2016-6815 is a MEDIUM (CVSS 6.5) vulnerability affecting org.apache.ranger:ranger, ranger (apache).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
Fix: update to 0.6.2 or later.

Package	Affected versions	Patched versions
org.apache.ranger:ranger Maven	`< 0.6.2`	`0.6.2`
ranger apache	`= 0.4.0= 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.6.0= 0.6.1`	No fix yet

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

NVD description

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 0.6.2

0.6.2

= 0.4.0= 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.6.0= 0.6.1

No fix yet

More vulnerabilities in org.apache.ranger:ranger

See all →