Rewterz Threat Advisory – CVE-2023-31413 – Elastic Filebeat Vulnerability
May 5, 2023Rewterz Threat Advisory – CVE-2022-45048 – Apache Ranger Vulnerability
May 7, 2023Rewterz Threat Advisory – CVE-2023-31413 – Elastic Filebeat Vulnerability
May 5, 2023Rewterz Threat Advisory – CVE-2022-45048 – Apache Ranger Vulnerability
May 7, 2023Severity
Medium
Analysis Summary
CVE-2022-45048
Apache Ranger could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper input validation by the policy expression. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-45048
Affected Vendors
Apache
Affected Products
- Apache Ranger 2.3.0
Remediation
Upgrade to the latest version of Apache Ranger, available from the Apache Web site.