✕
Request a Demo
Rewterz
Rewterz Threat Alert – North Korean APT Kimsuky Aka Black Banshee – Active IOCs
December 16, 2022
Rewterz
Rewterz Threat Advisory – Shuckworm APT Group aka Armageddon – Active IOCs
December 16, 2022

Rewterz Threat Advisory – CVE-2022-34271 – Apache Atlas Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-34271

Apache Atlas could allow a remote authenticated attacker to traverse directories on the system, caused by improper archive file validation. An attacker could use a specially-crafted archive file containing “dot dot” sequences (/../) to write to web server filesystem.

Impact

Information Theft

Indicators Of Compromise

CVE

  • CVE-2022-34271

Affected Vendors

Apache

Affected Products

  • Apache Atlas 0.8.4
  • Apache Atlas 2.2.0

Remediation

Upgrade to the latest version of Apache Atlas, available from the Apache Website.

Apache Website