CVE-2016-6815: Apache Ranger

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

Affected products

• Apache Ranger: version 0.4.0 only; version 0.5.0 only; version 0.5.1 only; version 0.5.2 only; version 0.5.3 only; version 0.6.0 only; …

Published 2017-10-13. Last modified 2026-06-17.