CVE-2016-0733

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

Date published : 2016-04-12

http://www.securityfocus.com/bid/82871

https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger