Lucene search
HistoryDec 14, 2022 - 3:15 p.m.
CVE-2022-46996
vulnerability
code execution
backdoor
sensitive information
privilege escalation
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.5%
vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
Affected configurations
Node
vsphere_selfuse_projectvsphere_selfuseMatch2019-07-22
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vsphere_selfuse_project | vsphere_selfuse | 2019-07-22 | cpe:2.3:a:vsphere_selfuse_project:vsphere_selfuse:2019-07-22:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-46996
2022-12-14 15:15:10
prion
prion
Design/Logic Flaw
2022-12-14 15:15:00
cvelist
cvelist
CVE-2022-46996
2022-12-14 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.5%
Related for NVD:CVE-2022-46996