Lucene search

PRIOn knowledge basePRION:CVE-2022-46768

HistoryDec 15, 2022 - 7:15 a.m.

Arbitrary file deletion

2022-12-1507:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.1%

JSON

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

CPENameOperatorVersion
web_service_report_generationge6.2.0
web_service_report_generationle6.2.5
web_service_report_generationge6.0.0
web_service_report_generationle6.0.11
zabbix-agent2ge6.2.0
zabbix-agent2lt6.2.6
zabbix-agent2lt6.0.12

Name	Operator	Version
web_service_report_generation	ge	6.2.0
web_service_report_generation	le	6.2.5
web_service_report_generation	ge	6.0.0
web_service_report_generation	le	6.0.11
zabbix-agent2	ge	6.2.0
zabbix-agent2	lt	6.2.6
zabbix-agent2	lt	6.0.12

References

support.zabbix.com/browse/ZBX-22087

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.1%

JSON

Related for PRION:CVE-2022-46768