Lucene search

K
nvd[email protected]NVD:CVE-2022-4778
HistoryDec 29, 2022 - 12:15 a.m.

CVE-2022-4778

2022-12-2900:15:08
CWE-22
web.nvd.nist.gov
streamx
applications
6.02.01-6.04.34
path traversal
vulnerability
authenticated users
unauthorized access
files
server's filesystem
streamview html component
public web server

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

29.2%

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server’s filesystem.
StreamX applications using StreamView HTML component with the public web server feature activated are affected.

Affected configurations

NVD
Node
elvexysstreamxRange6.02.016.04.34

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

29.2%

Related for NVD:CVE-2022-4778