CVE-2016-0733

published 2016-04-12

CVE-2016-0733: The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	ranger	<= 0.5.0	—

CWE-287