Lucene search
INCDCVELIST:CVE-2022-22793HistoryFeb 14, 2022 - 12:00 a.m.
CVE-2022-22793 Cybonet - PineApp Mail Relay Local File Inclusion
2022-02-1400:00:00
INCD
www.cve.org
6.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
0.001 Low
EPSS
Percentile
50.5%
Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server.
CNA Affected
[
{
"product": "Pineapp Mail Relay",
"vendor": "Cybonet",
"versions": [
{
"status": "affected",
"version": "PineApp Latest"
}
]
}
]Related
nvd
nvd
CVE-2022-22793
2022-02-24 17:15:07
cve
cve
CVE-2022-22793
2022-02-24 17:15:07
prion
prion
Design/Logic Flaw
2022-02-24 17:15:00
6.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
0.001 Low
EPSS
Percentile
50.5%
Related for CVELIST:CVE-2022-22793