Lucene search
+L

9 matches found

OSV
OSV
•added 2023/07/06 9:14 p.m.•68 views

GHSA-89GW-CFFJ-MQG9 Apache Ranger code execution vulnerability in policy expressions

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0...

8.8CVSS8.8AI score0.01126EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/07/06 9:14 p.m.•45 views

Apache Ranger code execution vulnerability in policy expressions

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0...

8.8CVSS7.5AI score0.01126EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/05 7:50 a.m.•19 views

CVE-2022-45048 Apache Ranger: code execution vulnerability in policy expressions

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0...

8.4CVSS8.9AI score0.01126EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/05 7:50 a.m.•53 views

CVE-2022-45048 Apache Ranger: code execution vulnerability in policy expressions

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0...

8.4CVSS9.2AI score0.01126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/05/05 12:00 a.m.•17 views

PT-2023-14577 · Apache · Apache Ranger

Name of the Vulnerable Software and Affected Versions: Apache Ranger version 2.3.0 Description: The issue allows authenticated users with appropriate privileges to create policies having expressions that can exploit a code execution vulnerability. Recommendations: For Apache Ranger version 2.3.0,...

8.8CVSS7.6AI score0.01126EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/05 12:00 a.m.•2 views

CVE-2022-45048: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0...

8.8CVSS6AI score0.01126EPSS
SaveExploits0References2
Citrix
Citrix
•added 2023/04/19 12:00 a.m.•15 views

How to control IP address returned in a DNS query based on source IP address (local DNS IP address)

This article contains information about how to control IP address returned in a DNS query based on source IP address local DNS IP address The IP addresses DNS returned must work inactive/standby mode. Also, you can use DNS policy expressions to monitor load balancing service statusassociate to th...

6.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/14 12:00 a.m.•5 views

CVE-2019-19879: Undefined Security Weakness

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2...

7.5CVSS7.2AI score0.01186EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/02/14 12:00 a.m.•6 views

PT-2020-10282

Name of the Vulnerable Software and Affected Versions HashiCorp Sentinel versions up to 0.10.1 Description The issue concerns the incorrect parsing of negation in certain policy expressions. This was fixed in version 0.10.2. Recommendations For HashiCorp Sentinel versions up to 0.10.1, update to...

7.5CVSS0.01186EPSS
SaveExploits1References4
Rows per page
Query Builder