CVE-2022-1399

🗓️ 16 Aug 2022 23:20:10Reported by BitdefenderType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 58 Views

An Argument Injection or Modification vulnerability in the "Change Secret" username field allows local attacker to run arbitrary code with root privilege

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-1399	16 Aug 202221:00	–	attackerkb
Circl	CVE-2022-1399	12 Aug 202207:58	–	circl
CNNVD	Device42 参数注入漏洞	16 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-1399 Remote code execution in scheduled tasks component	16 Aug 202223:20	–	cvelist
EUVD	EUVD-2022-24715	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1399	17 Aug 202200:15	–	nvd
Prion	Design/Logic Flaw	17 Aug 202200:15	–	prion
Positive Technologies	PT-2022-4180 · Device42 · Device42 Cmdb	12 Aug 202200:00	–	ptsecurity
The Hacker News	Critical Flaws Disclosed in Device42 IT Asset Management Software	11 Aug 202209:23	–	thn

NVD

Node

device42 cmdbRange<18.01.00

[
  {
    "product": "CMDB",
    "vendor": "Device42",
    "versions": [
      {
        "lessThan": "18.01.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]