Lucene search
PRIOn knowledge basePRION:CVE-2022-39289HistoryOct 07, 2022 - 9:15 p.m.
Double free
2022-10-0721:15:00
PRIOn knowledge base
www.prio-n.com
5
zoneminder
api security
database logging
0.001 Low
EPSS
Percentile
30.3%
ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zoneminder | ge | 1.37.0 | |
| zoneminder | lt | 1.37.24 | |
| zoneminder | le | 1.36.27 |
Related
cnvd
cnvd
ZoneMinder Information Disclosure Vulnerability
2022-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2022-39289
2022-10-07 21:15:11
veracode
veracode
Information Disclosure
2022-10-20 19:33:18
cve
cve
CVE-2022-39289
2022-10-07 21:15:11
nvd
nvd
CVE-2022-39289
2022-10-07 21:15:11
ubuntucve
ubuntucve
CVE-2022-39289
2022-10-07 00:00:00
debiancve
debiancve
CVE-2022-39289
2022-10-07 21:15:11
cvelist
cvelist
CVE-2022-39289 Database log access in ZoneMinder
2022-10-07 00:00:00
osv
osv
CVE-2022-39289
2022-10-07 21:15:11
openvas
openvas
ZoneMinder < 1.36.27, 1.37.x < 1.37.24 Multiple Vulnerabilities
2022-11-23 00:00:00