Lucene search

K
nvd[email protected]NVD:CVE-2022-46829
HistoryDec 08, 2022 - 6:15 p.m.

CVE-2022-46829

2022-12-0818:15:10
CWE-287
web.nvd.nist.gov
jetbrains
gateway
client connection
vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

58.4%

In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented.

Affected configurations

NVD
Node
jetbrainsjetbrains_gatewayRange<2022.3

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

58.4%

Related for NVD:CVE-2022-46829