CVE-2016-6815: Medium severity apache ranger vulnerability
Published Oct 13, 2017
·Updated
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Affected Software
7 affected components
Apache Ranger=0.4.0
Apache Ranger=0.5.0
Apache Ranger=0.5.1
Apache Ranger=0.5.2
Apache Ranger=0.5.3
Apache Ranger=0.6.0
Apache Ranger=0.6.1
Event History
Oct 13, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-6815?
The severity of CVE-2016-6815 is categorized as medium due to the potential unauthorized privilege escalation.
2
How do I fix CVE-2016-6815?
To fix CVE-2016-6815, upgrade Apache Ranger to version 0.6.2 or later where this issue has been resolved.
3
Who is affected by CVE-2016-6815?
Users with the 'keyadmin' role in Apache Ranger versions prior to 0.6.2 are affected by CVE-2016-6815.
4
What is the impact of CVE-2016-6815?
The impact of CVE-2016-6815 allows users with a 'keyadmin' role to change passwords for 'admin' role users, potentially compromising the system's security.
5
When was CVE-2016-6815 reported?
CVE-2016-6815 was reported in 2016, highlighting a vulnerability in Apache Ranger prior to version 0.6.2.