Lucene search

GitHub Advisory DatabaseGHSA-G594-55MP-F6Q8

HistoryDec 12, 2022 - 6:30 p.m.

Improper Privilege Management in rdiffweb

2022-12-1218:30:27

CWE-269

GitHub Advisory Database

github.com

privilege management

unauthorized access

github repository

rdiffweb

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.2%

JSON

Unauthorized access to settings update, logs , history, delete etc in GitHub repository ikus060/rdiffweb prior to 2.5.2.

Affected configurations

Vulners

Node

rdiffwebrdiffwebRange<2.5.2

VendorProductVersionCPE
rdiffwebrdiffweb*cpe:2.3:a:rdiffweb:rdiffweb:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rdiffweb	rdiffweb	*	cpe:2.3:a:rdiffweb:rdiffweb::::::::

References

github.com/advisories/GHSA-g594-55mp-f6q8

github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25

huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8

nvd.nist.gov/vuln/detail/CVE-2022-4314

www.cve.org/CVERecord?id=CVE-2022-4314

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.2%

JSON

Related for GHSA-G594-55MP-F6Q8