| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.ranger:ranger | < 0.6.2 | 0.6.2 |
| ranger | = 0.4.0= 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.6.0= 0.6.1 |
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free