Lucene search
HistoryOct 07, 2022 - 3:15 p.m.
CVE-2022-39849
improper access control
knox_vpn_policy
smr oct-2022 release 1
unauthorized read
configuration data
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
12.6%
Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.
Affected configurations
Node
googleandroidMatch10.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
Related
cve
cve
CVE-2022-39849
2022-10-07 15:15:18
prion
prion
Improper access control
2022-10-07 15:15:00
cvelist
cvelist
CVE-2022-39849
2022-10-07 00:00:00
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
12.6%
Related for NVD:CVE-2022-39849