← All advisories

Medium severity6.5NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2016-6815

CVE-2016-6815

Description

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.ranger:rangerMaven	< 0.6.2	0.6.2

Affected products

9

Apache/Ranger7 versions
cpe:2.3:a:apache:ranger:0.4.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:apache:ranger:0.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ranger:0.6.1:*:*:*:*:*:*:*
ghsa-coords
pkg:maven/org.apache.ranger/ranger
Range: < 0.6.2
Apache Software Foundation/Apache Rangerv5
Range: 0.5.x

Patches

Vulnerability mechanics

References

4

www.securityfocus.com/bid/94221nvdThird Party AdvisoryVDB EntryWEB
cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+RangernvdVendor AdvisoryWEB
github.com/advisories/GHSA-vhxc-8jjq-859jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-6815ghsaADVISORY

News mentions

0

No linked articles in our index yet.