{"action":"Upgrade org.apache.ranger:ranger to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2015-0266"],"ecosystem":"Maven","epss":0.02103,"exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-7ccv-hhvc-62hg","id":"tcs_01M5N8J3EV85M79HAJ7JXH7XGS","modified_at":"2025-04-14T21:12:17.210148Z","published_at":"2022-05-17T03:57:19Z","references":["https://osv.dev/vulnerability/GHSA-7ccv-hhvc-62hg","https://nvd.nist.gov/vuln/detail/CVE-2015-0266","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/apache/ranger","https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E","https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel@apache.org%3E","https://web.archive.org/web/20200228073944/http://www.securityfocus.com/bid/76221","http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-7ccv-hhvc-62hg","url":"https://osv.dev/vulnerability/GHSA-7ccv-hhvc-62hg"}],"summary":"Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs"}