Description (CNA)
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache Ranger | affected 0.5.x; affected 0.6.0; affected 0.6.1 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/94221
- https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
ADP enrichment
No English description supplied.