GHSA-j84c-j8qm-g47rCriticalCVSS 9.8

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password

Published
October 17, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2016-0733 →

📋 Description

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

🎯 Affected products1

  • maven/org.apache.ranger:ranger:< 0.5.1

🔗 References (6)