Lucene search

DellCVE-2022-29082

HistoryMay 26, 2022 - 4:15 p.m.

CVE-2022-29082

2022-05-2616:15:08

CWE-295

CWE-297

dell

web.nvd.nist.gov

dell emc networker

cve-2022-29082

improper validation

certificate

rabbitmq

5671

vulnerability

nvd

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote attackers to spoof certificates.

Affected configurations

Nvd

Vulners

Node

dellemc_networkerRange19.1.1.0–19.5.0.7

dellemc_networkerRange19.6.0–19.6.0.3

dellemc_networkerMatch19.6.1

VendorProductVersionCPE
dellemc_networker*cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*
dellemc_networker19.6.1cpe:2.3:a:dell:emc_networker:19.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	emc_networker	*	cpe:2.3:a:dell:emc_networker::::::::
dell	emc_networker	19.6.1	cpe:2.3:a:dell:emc_networker:19.6.1:::::::*

CNA Affected

[
  {
    "product": "NetWorker",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "19.6.0.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000198987

Social References

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Related for CVE-2022-29082