CVE-2022-45855 - OpenCVE

SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Apache	Ambari

Configuration 1 [-]

cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1

History

No history.

MITRE

Status: PUBLISHED

Assigner: apache

Published: 2023-07-12T09:59:44.492Z

Updated: 2024-08-03T14:24:02.941Z

Reserved: 2022-11-23T09:10:46.930Z

Link: CVE-2022-45855

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-07-12T10:15:09.547

Modified: 2023-07-20T01:19:07.767

Link: CVE-2022-45855

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-45855", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "state": "PUBLISHED", "assignerShortName": "apache", "dateReserved": "2022-11-23T09:10:46.930Z", "datePublished": "2023-07-12T09:59:44.492Z", "dateUpdated": "2024-08-03T14:24:02.941Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Apache Ambari", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "2.7.6", "status": "affected", "version": "2.7.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "rg <18993610179@163.com>"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. U<span style=\"background-color: rgb(255, 255, 255);\">sers are recommended to upgrade to 2.7.7.</span><br>"}], "value": "SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely.\u00a0Users are recommended to upgrade to 2.7.7.\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-917", "description": "CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2023-07-12T09:59:44.492Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1"}], "source": {"discovery": "UNKNOWN"}, "title": "Apache Ambari: Allows authenticated metrics consumers to perform RCE", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T14:24:02.941Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1"}]}]}}