Lucene search

[email protected]CVE-2022-45832

HistoryJun 19, 2024 - 3:15 p.m.

CVE-2022-45832

2024-06-1915:15:56

CWE-862

[email protected]

web.nvd.nist.gov

hennessey digital attorney

authorization

vulnerability

versions

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

Missing Authorization vulnerability in Hennessey Digital Attorney.This issue affects Attorney: from n/a through 3.

Affected configurations

Vulners

Node

hennessey_digitalattorneyRange≤3

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/themes",
    "defaultStatus": "unaffected",
    "packageName": "attorney",
    "product": "Attorney",
    "vendor": "Hennessey Digital",
    "versions": [
      {
        "lessThanOrEqual": "3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/attorney/wordpress-attorney-theme-3-unauth-arbitrary-content-deletion-vulnerability?_s_id=cve

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-45832

nvd1 cvelist1