Privilege Escalation

🗓️ 14 Jul 2022 17:02:28Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

git vulnerability privilege escalation lack of validatio

Reporter	Title	Published	Views	Family All 165
ALT Linux	Security fix for the ALT Linux 10 package git version 2.33.4-alt1	23 Jun 202200:00	–	altlinux
ATTACKERKB	CVE-2022-29187	12 Jul 202221:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : git, git-all, git-core (ALAS2022-2022-118)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : git (ALAS2022-2022-236)	10 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : git (ALAS-2022-1820)	21 Jul 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : git (ALAS-2022-1623)	5 Aug 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : git (ALSA-2023:2319)	14 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : git (ALSA-2023:2859)	20 May 202300:00	–	nessus
Tenable Nessus	CentOS 8 : git (CESA-2023:2859)	16 May 202300:00	–	nessus

Vulners

Node

git gitMatch2.36.0-r0os

AND

git gitMatch2.36.1-r0os

AND

alpinelinux alpine_linuxMatch3.16

git gitMatch2.34.0-r0os

AND

git gitMatch2.33.1-r0os

AND

git gitMatch2.34.1-r0os

AND

git gitMatch2.34.2-r0os

AND

alpinelinux alpine_linuxMatch3.15

git gitMatch2.33.0-r2os

AND

git gitMatch2.35.1-r0os

AND

git gitMatch2.25.1-r0os

AND

git gitMatch2.30.2-r0os

AND

git gitMatch2.30.1-r0os

AND

git gitMatch2.26.1-r0os

AND

git gitMatch2.32.0-r1os

AND

git gitMatch2.32.0-r0os

AND

git gitMatch2.37.0-r0os

AND

git gitMatch2.27.0-r0os

AND

git gitMatch2.31.0-r0os

AND

git gitMatch2.26.0-r0os

AND

git gitMatch2.34.1-r0os

AND

git gitMatch2.35.0-r0os

AND

git gitMatch2.25.2-r0os

AND

git gitMatch2.36.0-r0os

AND

git gitMatch2.33.0-r0os

AND

git gitMatch2.33.1-r0os

AND

git gitMatch2.36.1-r0os

AND

git gitMatch2.35.1-r1os

AND

git gitMatch2.26.2-r0os

AND

git gitMatch2.32.0-r2os

AND

git gitMatch2.31.1-r1os

AND

git gitMatch2.34.1-r1os

AND

alpinelinux alpine_linuxMatchedge

git gitMatch2.30.2-r0os

AND

git gitMatch2.30.3-r0os

AND

git gitMatch2.30.1-r0os

AND

alpinelinux alpine_linuxMatch3.13

git gitMatch2.32.0-r0os

AND

git gitMatch2.32.1-r0os

AND

git gitMatch2.32.2-r0os

AND

git gitMatch2.31.1-r1os

AND

alpinelinux alpine_linuxMatch3.14

google bionicMatch1:2.17.1-1ubuntu0.7debian

AND

google bionicMatch1:2.17.1-1ubuntu0.9debian

AND

google bionicMatch1:2.17.0-1ubuntu1debian

AND

debian debian_linux

focal focalMatch1:2.25.1-1ubuntu3debian

AND

debian debian_linux

libgit2 libgit2Match1.1.1-r1os

AND

libgit2 libgit2Match1.4.2-r0os

AND

libgit2 libgit2Match1.3.0-r0os

AND

libgit2 libgit2Match1.4.3-r0os

AND

libgit2 libgit2Match1.1.0-r1os

AND

libgit2 libgit2Match1.0.0-r0os

AND

libgit2 libgit2Match0.28.4-r1os

AND

libgit2 libgit2Match1.1.0-r2os

AND

libgit2 libgit2Match1.1.1-r2os

AND

libgit2 libgit2Match1.1.1-r0os

AND

alpinelinux alpine_linuxMatchedge

devel develMatch1:2.30.1-1ubuntu1debian

AND

devel develMatch1:2.29.2-1ubuntu1debian

AND

devel develMatch1:2.27.0-1ubuntu1debian

AND

debian debian_linux

git gitMatch1:2.30.1-1debian

AND

git gitMatch1:2.29.2-1debian

AND

debian debian_linuxMatch999

git gitMatch1:2.20.1-2+deb10u3debian

AND

debian debian_linuxMatch10

git gitMatch1:2.29.2-1debian

AND

debian debian_linuxMatch11

git gitMatch2.31.1_2.el8

git gitMatch2.18.2_2.el8_1

git gitMatch2.39.0_1.el8

git gitMatch2.18.1_3.el8

git gitMatch2.18.1_4.el8

git gitMatch2.18.2_1.el8_1

git gitMatch2.27.0_1.el8

git gitMatch2.18.4_2.el8_2

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Nov/1
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00025.html
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TRZG5CDUQ27OWTPC5MQOR4UASNXHWEZS/

14 Jan 2024 11:26Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

CVSS 26.9

EPSS0.00108

git vulnerability validation unauthorized actions