Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-32222
HistoryJul 14, 2022 - 3:15 p.m.

Design/Logic Flaw

2022-07-1415:15:00
PRIOn knowledge base
www.prio-n.com
9

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

23.8%

JSON

A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3.

Related

debiancve 1
veracode 1
redhatcve 1
osv 2
hackerone 3
ubuntucve 1
cve 1
alpinelinux 1
nessus 4
openvas 1
ibm 10
mageia 1
freebsd 1
nodejsblog 2
ics 1
oracle 2
debiancve
debiancve
CVE-2022-32222
2022-07-14 15:15:00
veracode
veracode
Insecure Cryptography
2022-07-15 12:11:39
redhatcve
redhatcve
CVE-2022-32222
2022-07-08 19:17:55
osv
osv
BIT-node-2022-32222
2024-03-06 11:03:38
CVE-2022-32222
2022-07-14 15:15:08
hackerone
hackerone
Node.js: Node 18 reads openssl.cnf from /home/iojs/build/... upon startup.
2022-07-03 04:17:48
Internet Bug Bounty: Inadequate Encryption Strength in nodejs-current reads openssl.cnf from /home/iojs/build/... upon startup on MacOS
2023-02-28 04:49:13
Node.js: Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on MacOS
2022-09-08 19:43:15
ubuntucve
ubuntucve
CVE-2022-32222
2022-07-14 00:00:00
cve
cve
CVE-2022-32222
2022-07-14 15:15:00
alpinelinux
alpinelinux
CVE-2022-32222
2022-07-14 15:15:00
nessus
nessus
Node.js 14.x < 14.20.1 / 16.x < 16.17.1 / 18.x < 18.9.1 Multiple Vulnerabilities (September 23rd 2022 Security Releases).
2022-10-03 00:00:00
FreeBSD : Node.js -- July 7th 2022 Security Releases (b9210706-feb0-11ec-81fa-1c697a616631)
2022-07-08 00:00:00
Node.js 14.x < 14.20.0 / 16.x < 16.16.0 / 18.x < 18.5.0 Multiple Vulnerabilities (July 7th 2022 Security Releases).
2022-10-03 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0294)
2022-08-26 00:00:00
ibm
ibm
Security Bulletin: IBM Cognos Dashboards on IBM Cloud Pak for Data has addressed security vulnerabilities (CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32222, CVE-2023-26136)
2023-09-01 14:38:22
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Event Streams
2022-09-30 14:07:36
Security Bulletin: IBM Answer Retrieval for Watson Discovery is vulnerable to HTTP request smuggling due to NodeJS
2022-07-12 18:46:37
mageia
mageia
Updated nodejs packages fix security vulnerability
2022-08-26 00:21:07
freebsd
freebsd
Node.js -- July 7th 2022 Security Releases
2022-07-05 00:00:00
nodejsblog
nodejsblog
September 23rd 2022 Security Releases
2022-09-15 00:00:00
July 7th 2022 Security Releases
2022-07-07 00:00:00
ics
ics
Siemens SINEC INS
2023-01-17 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

23.8%

JSON
Related for PRION:CVE-2022-32222
debiancve1veracode1redhatcve1osv2hackerone3ubuntucve1cve1alpinelinux1nessus4openvas1ibm10mageia1freebsd1nodejsblog2ics1oracle2