{"action":"Upgrade org.apache.ranger:ranger to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2015-5167"],"ecosystem":"Maven","epss":0.01933,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-qqg7-gcxw-gmj3","id":"tcs_01M5N9A39XPRD6KGZK87HE4JXN","modified_at":"2025-04-14T21:27:20.189447Z","published_at":"2022-05-17T03:57:16Z","references":["https://osv.dev/vulnerability/GHSA-qqg7-gcxw-gmj3","https://nvd.nist.gov/vuln/detail/CVE-2015-5167","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/apache/ranger","https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E","https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel@apache.org%3E","https://web.archive.org/web/20200501000000*/http://www.securityfocus.com/bid/82871"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qqg7-gcxw-gmj3","url":"https://osv.dev/vulnerability/GHSA-qqg7-gcxw-gmj3"}],"summary":"Apache Ranger allows users to bypass intended access restrictions via the REST API"}