CVE-2022-4018

2022-11-1613:15:10

CWE-306

@huntrdev

web.nvd.nist.gov

cve-2022-4018

authentication

github repository

ikus060

rdiffweb

nvd

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

37.9%

JSON

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

Affected configurations

Nvd

Node

ikus-softrdiffwebRange≤2.4.10

ikus-softrdiffwebMatch2.5.0alpha1

ikus-softrdiffwebMatch2.5.0alpha2

ikus-softrdiffwebMatch2.5.0alpha3

ikus-softrdiffwebMatch2.5.0alpha4

ikus-softrdiffwebMatch2.5.0alpha5

VendorProductVersionCPE
ikus-softrdiffweb*cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha3:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha4:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha5:*:*:*:*:*:*

Vendor	Product	Version	CPE
ikus-soft	rdiffweb	*	cpe:2.3:a:ikus-soft:rdiffweb::::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha3::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha4::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha5::::::

CNA Affected

[
  {
    "vendor": "ikus060",
    "product": "ikus060/rdiffweb",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.5.0a6",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]