Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-21696
HistoryJan 18, 2022 - 12:00 a.m.

CVE-2022-21696

2022-01-1800:00:00
ubuntu.com
ubuntu.com
8
onionshare
file sharing
website hosting
chat
cve-2022-21696
tor network
impersonation
username change

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

19.4%

OnionShare is an open source tool that lets you securely and anonymously
share files, host websites, and chat with friends using the Tor network. In
affected versions it is possible to change the username to that of another
chat participant with an additional space character at the end of the name
string. An adversary with access to the chat environment can use the rename
feature to impersonate other participants by adding whitespace characters
at the end of the username.

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

19.4%