CVE-2016-6815 In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with…

Description

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

Affected products and versions

Product	Affected versions	Fixed in
Apache Ranger 0.6	0.6.0 → 0.6.1	No fix stated
Apache Ranger	0.5.x	No fix stated

Other CVEs of Apache Ranger

The 23 CVEs of Apache Ranger →

CVE-2026-28672 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger Not rated CVE-2026-32227 SQL Injection vulnerability vulnerability in Apache Ranger Not rated CVE-2026-40920 Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0 Not rated CVE-2026-42537 Remote Code Execution via JDBC URL Injection in Apache… Not rated