CVE-2022-0074

🗓️ 27 Oct 2022 19:32:19Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 199 Views

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-0074	27 Oct 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path, which allows attackers to escalate their privileges.	15 Feb 202300:00	–	bdu_fstec
Circl	CVE-2022-0074	28 Oct 202200:28	–	circl
CNNVD	Litespeed Technologie OpenLiteSpeed 代码问题漏洞	27 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-0074 Privilege Escalation in OpenLiteSpeed Web Server	27 Oct 202219:32	–	cvelist
EUVD	EUVD-2022-15295	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0074	27 Oct 202220:15	–	nvd
Prion	Design/Logic Flaw	27 Oct 202220:15	–	prion
Positive Technologies	PT-2022-12964 · Litespeed Technologies · Openlitespeed Web Server +1	27 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-0074	9 Jan 202608:41	–	redhatcve

NVD

Vulners

Node

litespeedtech openlitespeedRange1.6.15–1.7.16.1

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenLiteSpeed Web Server",
    "repo": "https://github.com/litespeedtech/openlitespeed",
    "vendor": "LiteSpeed Technologies",
    "versions": [
      {
        "lessThan": "1.7.16.1",
        "status": "affected",
        "version": "1.6.15",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LiteSpeed Web Server",
    "vendor": "LiteSpeed Technologies",
    "versions": [
      {
        "lessThan": "1.7.16.1",
        "status": "affected",
        "version": "1.6.15",
        "versionType": "custom"
      }
    ]
  }
]