Severity
Medium
Analysis Summary
CVE-2022-45048
Apache Ranger could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper input validation by the policy expression. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-45048
Affected Vendors
Apache
Affected Products
- Apache Ranger 2.3.0
Remediation
Upgrade to the latest version of Apache Ranger, available from the Apache Web site.