CVE-2016-0733

CRITICAL9.8EPSS 1.7%

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password

發布日:2018/10/17修改日:2023/11/8

描述

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1CRITICAL9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(6)