Lucene search

[email protected]CVE-2022-27563

HistoryAug 30, 2022 - 10:15 p.m.

CVE-2022-27563

2022-08-3022:15:08

CWE-754

[email protected]

web.nvd.nist.gov

cve-2022-27563

hcl

versionvault express

denial of service

unauthenticated user

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

40.5%

JSON

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

Affected configurations

NVD

Node

hcltechversionvault_expressMatch2.0.1

hcltechversionvault_expressMatch2.1.0

CPENameOperatorVersion
hcltech:versionvault_expresshcltech versionvault expresseq2.0.1
hcltech:versionvault_expresshcltech versionvault expresseq2.1.0

CPE	Name	Operator	Version
hcltech:versionvault_express	hcltech versionvault express	eq	2.0.1
hcltech:versionvault_express	hcltech versionvault express	eq	2.1.0

CNA Affected

[
  {
    "product": "HCL VersionVault Express",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.1, 2.1.0"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

40.5%

JSON

Related for CVE-2022-27563

cvelist1 nvd1 prion1