Base Score

MEDIUM6.5

CVE-2015-5167

The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.

VectorNETWORK

Published Bysecalert@redhat.com

Published DateApr 12, 2016, 14:59

Affected Versions(1)

org.apache.ranger:ranger(Maven)

Introduced0

Fixed0.5.1

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
org.apache.ranger:ranger(Maven)	0	0.5.1	N/A

Weakness Type (CWE):CWE-264

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-264

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE