CVE-2022-45048 — Apache Ranger: code execution vulnerability in policy expressions

CVE-2022-45048

Apache Ranger: code execution vulnerability in policy expressions PUBLISHED

Description (CNA)

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Ranger	affected 2.3.0

CWE

CWE-74

References

https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6

CISA-ADP

No English description supplied.

No references supplied.