Lucene search
HistoryJan 01, 2023 - 8:15 a.m.
CVE-2022-45027
cve-2022-45027
perfsonar
participant discovery
http request header
vulnerability
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.8%
perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
Affected configurations
Node
perfsonarperfsonarRange<4.4.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| perfsonar:perfsonar | perfsonar | lt | 4.4.6 |
Related
nvd
nvd
CVE-2022-45027
2023-01-01 08:15:10
cvelist
cvelist
CVE-2022-45027
2023-01-01 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-01-01 08:15:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.8%
Related for CVE-2022-45027