Lucene search
Redhat.comRH:CVE-2022-39379HistoryNov 14, 2022 - 5:26 a.m.
CVE-2022-39379
2022-11-1405:26:21
redhat.com
access.redhat.com
18
fluentd
rce
vulnerability
unauthenticated
arbitrary code execution
json payloads
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.024 Low
EPSS
Percentile
90.1%
A remote code execution (RCE) vulnerability was found in non-default configurations of Fluentd. This issue allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads.
Related
nvd
nvd
CVE-2022-39379
2022-11-02 13:15:13
veracode
veracode
Arbitrary Code Execution
2022-11-03 05:17:04
nessus
nessus
CBL Mariner 2.0 Security Update: rubygem-fluentd (CVE-2022-39379)
2023-03-20 00:00:00
github
github
osv
osv
BIT-fluentd-2022-39379
2024-03-06 10:51:50
CVE-2022-39379
2022-11-02 13:15:13
openvas
openvas
fedora
fedora
prion
prion
Remote code execution
2022-11-02 13:15:00
cvelist
cvelist
cbl_mariner
cbl_mariner
cve
cve
CVE-2022-39379
2022-11-02 13:15:13
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.024 Low
EPSS
Percentile
90.1%
Related for RH:CVE-2022-39379