CVE-2016-6815

Description

In Apache Ranger before 0.6.2, users with keyadmin role should not be allowed to change password for users with admin role.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.489

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2016-6815 are fixed in Apache - ranger 0.6.2Windows
Vulnerabilities CVE-2016-6815 are fixed in Apache - ranger for Linux 0.6.2Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234