Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-1252
HistoryApr 11, 2022 - 10:15 a.m.

CVE-2022-1252 Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5

2022-04-1110:15:14
CWE-327
@huntrdev
www.cve.org

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any user, including when the ‘Let others see my information.’ box is ticked off. Or to send emails to any email address, with full control of its contents

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "gnuboard/gnuboard5",
    "vendor": "gnuboard",
    "versions": [
      {
        "lessThanOrEqual": "5.5.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

Related for CVELIST:CVE-2022-1252