CVE-2022-25568

2022-03-2417:15:08

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.0%

JSON

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

CPENameOperatorVersion
motioneyeeq0.42.1
motioneyeeq0.4
motioneyeeq0.5
motioneyeeq0.26
motioneyeeq0.29.1
motioneyeeq0.31.4
motioneyeeq0.17
motioneyeeq0.13
motioneyeeq0.32.1
motioneyeeq0.41

Name	Operator	Version
motioneye	eq	0.42.1
motioneye	eq	0.4
motioneye	eq	0.5
motioneye	eq	0.26
motioneye	eq	0.29.1
motioneye	eq	0.31.4
motioneye	eq	0.17
motioneye	eq	0.13
motioneye	eq	0.32.1
motioneye	eq	0.41