Lucene search
HistoryMar 12, 2023 - 5:15 a.m.
CVE-2022-48366
ez platform
kernel
timing attack
account existence
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.5%
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
Affected configurations
Node
ibexacommerceRange2.5.0–2.5.13
ORibexacommerceRange3.3.0–3.3.18
ORibexacommerceRange4.0.0–4.0.7
ORibexacommerceRange4.1.0–4.1.4
ORibexadigital_experience_platformRange3.3.0–3.3.20
ORibexadigital_experience_platformRange4.0.0–4.0.7
ORibexadigital_experience_platformRange4.1.0–4.1.4
ORibexaez_platformRange<2.5.30
ORibexaezplatform-page-builderRange1.3.0–1.3.27
ORibexaezplatform-page-builderRange2.3.0–2.3.19
ORibexajmspaymentcorebundleRange3.0.0–3.0.2
ORibexaez_platform_kernelRange1.3.0–1.3.19
ORibexaez_platform_kernelRange7.5.0–7.5.29
ORibexakernelRange4.0.0–4.0.7
ORibexakernelRange4.1.0–4.1.4
Related
osv
osv
Login timing attack in ezsystems/ezplatform-kernel
2022-06-02 20:53:43
Login timing attack in ezsystems/ezpublish-kernel
2022-06-02 21:02:00
Timing attack in eZ Platform Ibexa
2023-03-12 06:30:21
cvelist
cvelist
CVE-2022-48366
2023-03-12 00:00:00
veracode
veracode
Timing Attack
2023-03-17 00:51:02
prion
prion
Code injection
2023-03-12 05:15:00
github
github
Timing attack in eZ Platform Ibexa
2023-03-12 06:30:21
cve
cve
CVE-2022-48366
2023-03-12 05:15:12
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.5%
Related for NVD:CVE-2022-48366