Lucene search

K
nvd[email protected]NVD:CVE-2022-29082
HistoryMay 26, 2022 - 4:15 p.m.

CVE-2022-29082

2022-05-2616:15:08
CWE-295
CWE-297
web.nvd.nist.gov
2
dell emc networker
version 19
rabbitmq port 5671
improper certificate validation
remote attackers
spoof certificates

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.4%

Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote attackers to spoof certificates.

Affected configurations

Nvd
Node
dellemc_networkerRange19.1.1.019.5.0.7
OR
dellemc_networkerRange19.6.019.6.0.3
OR
dellemc_networkerMatch19.6.1
VendorProductVersionCPE
dellemc_networker*cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*
dellemc_networker19.6.1cpe:2.3:a:dell:emc_networker:19.6.1:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.4%

Related for NVD:CVE-2022-29082