Lucene search
HistoryOct 18, 2022 - 6:15 a.m.
CVE-2022-39055
certificate filtering
unauthenticated attack
ssrf
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
49.2%
RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.
Affected configurations
Node
changingtecrava_certificate_validation_systemMatch3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| changingtec | rava_certificate_validation_system | 3 | cpe:2.3:a:changingtec:rava_certificate_validation_system:3:*:*:*:*:*:*:* |
Related
prion
prion
Server side request forgery (ssrf)
2022-10-18 06:15:00
cvelist
cvelist
cve
cve
CVE-2022-39055
2022-10-18 06:15:08
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
49.2%
Related for NVD:CVE-2022-39055