Lucene search

K
cvelistINCDCVELIST:CVE-2022-46367
HistoryJan 12, 2023 - 12:00 a.m.

CVE-2022-46367 Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation

2023-01-1200:00:00
CWE-352
INCD
www.cve.org
3
rumpus
ftp server
csrf
vulnerability
privilege escalation

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

32.1%

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

CNA Affected

[
  {
    "vendor": "Rumpus",
    "product": "FTP server",
    "versions": [
      {
        "version": "latest",
        "status": "affected",
        "lessThan": "9.0.7.1*",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

32.1%

Related for CVELIST:CVE-2022-46367