Lucene search

K
cvelistMitreCVELIST:CVE-2022-37298
HistoryOct 20, 2022 - 12:00 a.m.

CVE-2022-37298

2022-10-2000:00:00
mitre
www.cve.org
4
shinken monitoring
version 2.4.3
vulnerable
incorrect access control
safeunpickler class
weak authentication scheme

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

57.3%

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

57.3%