CVE-2022-1399

🗓️ 16 Aug 2022 23:20:10Reported by BitdefenderType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 63 Views

An Argument Injection or Modification vulnerability in the "Change Secret" username field allows local attacker to run arbitrary code with root privilege

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-1399	16 Aug 202221:00	–	attackerkb
BDU FSTEC	The vulnerability of the Discovery component of the Device42 data center infrastructure management software allows a perpetrator to execute arbitrary code.	17 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-1399	12 Aug 202207:58	–	circl
CNNVD	Device42 参数注入漏洞	16 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-1399 Remote code execution in scheduled tasks component	16 Aug 202223:20	–	cvelist
EUVD	EUVD-2022-24715	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1399	17 Aug 202200:15	–	nvd
OSV	CVE-2022-1399	17 Aug 202200:15	–	osv
Prion	Design/Logic Flaw	17 Aug 202200:15	–	prion
Positive Technologies	PT-2022-4180 · Device42 · Device42 Cmdb	12 Aug 202200:00	–	ptsecurity

NVD

Node

device42 cmdbRange<18.01.00

[
  {
    "product": "CMDB",
    "vendor": "Device42",
    "versions": [
      {
        "lessThan": "18.01.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]