Lucene search
GoogleOSV:CVE-2022-40309HistoryNov 15, 2022 - 1:15 p.m.
CVE-2022-40309
2022-11-1513:15:11
Google
osv.dev
3
cve-2022-40309
repository
write permissions
directory deletion
software
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%
Users with write permissions to a repository can delete arbitrary directories.
Related
cvelist
cvelist
osv
osv
Apache Archiva subject to arbitrary directory deletion by users.
2022-11-15 19:00:52
cnvd
cnvd
Apache Archiva has an unspecified vulnerability (CNVD-2022-78861)
2022-11-17 00:00:00
prion
prion
Design/Logic Flaw
2022-11-15 13:15:00
cve
cve
CVE-2022-40309
2022-11-15 13:15:11
github
github
Apache Archiva subject to arbitrary directory deletion by users.
2022-11-15 19:00:52
nvd
nvd
CVE-2022-40309
2022-11-15 13:15:11
openvas
openvas
Apache Archiva < 2.2.9 Multiple Vulnerabilities
2022-11-16 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%
Related for OSV:CVE-2022-40309