Lucene search
Redhat.comRH:CVE-2022-39958HistorySep 30, 2022 - 5:19 p.m.
CVE-2022-39958
2022-09-3017:19:01
redhat.com
access.redhat.com
24
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.003 Low
EPSS
Percentile
65.4%
A flaw was found in the OWASP ModSecurity Core Rule Set. Repeated payloads with a HTTP range header field with a small byte range allows a response body bypass, resulting in access to restricted resources.
Related
cve
cve
CVE-2022-39958
2022-09-20 07:15:12
debiancve
debiancve
CVE-2022-39958
2022-09-20 07:15:12
prion
prion
Authentication flaw
2022-09-20 07:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-39958
2022-09-20 07:15:12
ubuntucve
ubuntucve
CVE-2022-39958
2022-09-20 00:00:00
veracode
veracode
Authorization Bypass
2022-10-10 21:08:57
osv
osv
CVE-2022-39958
2022-09-20 07:15:12
modsecurity-crs - security update
2023-01-30 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: mod_security_crs-3.3.4-1.fc35
2022-10-15 21:27:45
[SECURITY] Fedora 37 Update: mod_security-2.9.6-1.fc37
2022-11-10 22:40:46
[SECURITY] Fedora 35 Update: mod_security-2.9.6-1.fc35
2022-10-15 21:27:45
openvas
openvas
Fedora: Security Advisory for mod_security_crs (FEDORA-2022-90708b46e3)
2022-10-16 00:00:00
Fedora: Security Advisory for mod_security_crs (FEDORA-2022-85a85c84b3)
2022-10-16 00:00:00
Fedora: Security Advisory for mod_security_crs (FEDORA-2022-1fd73a5285)
2022-11-11 00:00:00
nessus
nessus
RHEL 7 : mod_security_crs (Unpatched Vulnerability)
2024-05-11 00:00:00
Fedora 35 : mod_security / mod_security_crs (2022-85a85c84b3)
2022-12-23 00:00:00
RHEL 9 : mod_security_crs (Unpatched Vulnerability)
2024-06-03 00:00:00
gentoo
gentoo
OWASP ModSecurity Core Rule Set: Multiple Vulnerabilities
2023-05-21 00:00:00
mageia
mageia
Updated apache-mod_security-crs packages fix security vulnerabilities
2024-03-18 19:12:23
debian
debian
[SECURITY] [DLA 3293-1] modsecurity-crs security update
2023-01-30 18:35:25
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.003 Low
EPSS
Percentile
65.4%
Related for RH:CVE-2022-39958