Apache Software Foundation Ranger 0.5.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ranger:0.5.0:*:*:*:*:*:*:*

part: a version: 0.5.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductRanger (1651d3c2-a472-53a1-8f67-9a1a4a5c64cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/ranger purl2cpe 2026-06-01 10:14:24.490753
pkg:github/apache/ranger purl2cpe 2026-06-01 10:14:24.490754
pkg:maven/org.apache.ranger/ranger purl2cpe 2026-06-01 10:14:24.490755

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6815 vulnerable 2026-06-08 05:08:11.036213 Details available
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Published: 2017-10-13T14:00:00.000Z
Updated: 2024-09-17T04:14:03.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2174 vulnerable 2026-06-08 05:07:33.495825 Details available
SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.
Published: 2016-06-13T14:00:00.000Z
Updated: 2024-08-05T23:17:50.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0735 vulnerable 2026-06-08 05:07:15.986434 Details available
Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy.
Published: 2016-04-11T19:00:00.000Z
Updated: 2024-08-05T22:30:04.074Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.