{"action":"Upgrade org.apache.ranger:ranger to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2016-0733"],"ecosystem":"Maven","epss":0.03063,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-j84c-j8qm-g47r","id":"tcs_01M5N92CKWCHT0E8SG7FHX8FAD","modified_at":"2023-11-08T03:58:05.683844Z","published_at":"2018-10-17T17:21:11Z","references":["https://osv.dev/vulnerability/GHSA-j84c-j8qm-g47r","https://nvd.nist.gov/vuln/detail/CVE-2016-0733","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/advisories/GHSA-j84c-j8qm-g47r","https://issues.apache.org/jira/browse/RANGER-835","https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel@apache.org%3E","http://www.securityfocus.com/bid/82871"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j84c-j8qm-g47r","url":"https://osv.dev/vulnerability/GHSA-j84c-j8qm-g47r"}],"summary":"The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password"}