PT-2022-7301 · Async +2 · Async +2

🗓️ 06 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Vulnerability in Async versions allows remote privilege escalation via mapValues() function exploit

Reporter	Title	Published	Views	Family All 7689
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-43138	27 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Moment affects IBM Process Mining . CVE-2022-31129	1 Feb 202321:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to golang.org/x/text ( CVE-2022-32149 )	6 Jun 202516:22	–	ibm

Source	Link
jsfiddle	www.jsfiddle.net/oz5twjd9
github	www.github.com/caolan/async/pull/1828
github	www.github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d
github	www.github.com/caolan/async/compare/v2.6.3...v2.6.4
osv	www.osv.dev/vulnerability/SUSE-SU-2022:3313-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:0196-1
osv	www.osv.dev/vulnerability/SUSE-SU-2023:2579-1
osv	www.osv.dev/vulnerability/SUSE-SU-2022:3761-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:0487-1
osv	www.osv.dev/vulnerability/GHSA-fwr7-v2mv-hh25

25 Jun 2025 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8 - 9.8

CVSS 27.8

CVSS 39.8

EPSS0.99933

SSVC