Lucene search

VulDBCVE-2022-4281

HistoryDec 05, 2022 - 7:15 a.m.

CVE-2022-4281

2022-12-0507:15:10

CWE-269

CWE-266

VulDB

web.nvd.nist.gov

cve-2022-4281

facepay 1.0

authorization bypass

remote attack

vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability.

Affected configurations

Nvd

Vulners

Node

facepay_projectfacepayMatch1.0

VendorProductVersionCPE
facepay_projectfacepay1.0cpe:2.3:a:facepay_project:facepay:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
facepay_project	facepay	1.0	cpe:2.3:a:facepay_project:facepay:1.0:::::::*

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "Facepay",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?id.214789

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

Related for CVE-2022-4281