Lucene search
HistoryNov 15, 2022 - 10:15 p.m.
CVE-2022-30769
session fixation
zoneminder
cookie poisoning
cve-2022-30769
CVSS3
4.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
Affected configurations
Node
zoneminderzoneminderRange≤1.36.12
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoneminder | zoneminder | * | cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-30769
2022-11-15 00:00:00
debiancve
debiancve
CVE-2022-30769
2022-11-15 22:15:11
cve
cve
CVE-2022-30769
2022-11-15 22:15:11
ubuntucve
ubuntucve
CVE-2022-30769
2022-11-15 00:00:00
prion
prion
Session fixation
2022-11-15 22:15:00
osv
osv
CVE-2022-30769
2022-11-15 22:15:11
openvas
openvas
ZoneMinder < 1.36.13 Multiple Vulnerabilities
2022-11-23 00:00:00
CVSS3
4.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for NVD:CVE-2022-30769