Lucene search
HistoryOct 27, 2022 - 8:15 p.m.
CVE-2022-0074
litespeed technologies
openlitespeed web server
privilege escalation
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.
Affected configurations
Node
litespeedtechopenlitespeedRange1.6.15–1.7.16.1
Related
cve
cve
CVE-2022-0074
2022-10-27 20:15:12
osv
osv
CVE-2022-0074
2022-10-27 20:15:12
prion
prion
Design/Logic Flaw
2022-10-27 20:15:00
cvelist
cvelist
CVE-2022-0074 Privilege Escalation in OpenLiteSpeed Web Server
2022-10-27 19:32:19
thn
thn
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%
Related for NVD:CVE-2022-0074