Lucene search

K
cve[email protected]CVE-2022-2265
HistorySep 21, 2022 - 2:15 p.m.

CVE-2022-2265

2022-09-2114:15:11
CWE-22
CWE-35
web.nvd.nist.gov
24
2
identity management
directory management
cve-2022-2265
security vulnerability
path traversal
çekino bilgi teknolojileri
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

51.8%

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

Affected configurations

NVD
Node
identity_and_directory_management_system_projectidentity_and_directory_management_systemRange<2.1.25

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Çekino Bilgi Teknolojileri",
    "vendor": "Çekino Bilgi Teknolojileri",
    "versions": [
      {
        "lessThan": "2.1.25",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

51.8%

Related for CVE-2022-2265