Medium · 6.5 CVE-2015-5167 EUVD-2015-5174GHSA-qqg7-gcxw-gmj3

Apache Ranger allows users to bypass intended access restrictions via the REST API

Published Apr 12, 2016 · Updated Aug 6, 2024 · Assigned by redhat

Description

The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.ranger:ranger	< 0.5.1	0.5.1	GHSA-qqg7-gcxw-gmj3