Lucene search

TR-CERTCVELIST:CVE-2022-2265

HistorySep 21, 2022 - 12:00 a.m.

CVE-2022-2265 Path traversal in Identity and Directory Management System

2022-09-2100:00:00

CWE-35

TR-CERT

www.cve.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

51.9%

JSON

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Çekino Bilgi Teknolojileri",
    "vendor": "Çekino Bilgi Teknolojileri",
    "versions": [
      {
        "lessThan": "2.1.25",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-22-0636

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

51.9%

JSON

Related for CVELIST:CVE-2022-2265