Man-in-the-Middle (MitM)

🗓️ 11 Oct 2022 14:23:08Reported by Veracode Vulnerability DatabaseType

nheko vulnerability to man-in-the-middle attack

Reporter	Title	Published	Views	Family All 22
AlpineLinux	CVE-2022-39264	28 Sep 202200:00	–	alpinelinux
Circl	CVE-2022-39264	29 Sep 202202:34	–	circl
CNNVD	nheko 信任管理问题漏洞	28 Sep 202200:00	–	cnnvd
CVE	CVE-2022-39264	28 Sep 202200:00	–	cve
Cvelist	CVE-2022-39264 nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver	28 Sep 202200:00	–	cvelist
Debian CVE	CVE-2022-39264	28 Sep 202200:00	–	debiancve
EUVD	EUVD-2022-41773	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 36 Update: nheko-0.10.2-1.fc36	7 Oct 202215:56	–	fedora
Fedora	[SECURITY] Fedora 37 Update: nheko-0.10.2-1.fc37	3 Oct 202200:23	–	fedora
Tenable Nessus	Fedora 36 : nheko (2022-1fd94a54a1)	23 Dec 202200:00	–	nessus

Vulners

Node

nheko-reborn nhekoMatch0.7.2-3+b1debian

AND

nheko-reborn nhekoMatch0.7.2-2debian

AND

nheko-reborn nhekoMatch0.8.0+really0.7.2-4+b1debian

AND

AND

AND

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-39264
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TA6A5ADUVAYKD3ZFLF2JPZOTIOFJOEU7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TA6A5ADUVAYKD3ZFLF2JPZOTIOFJOEU7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBOL6OOQGPZD2RLYT4EHAWTFXNIHLYEN/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YBOL6OOQGPZD2RLYT4EHAWTFXNIHLYEN/
github	www.github.com/Nheko-Reborn/nheko/commit/67bee15a389f9b8a9f6c3a340558d1e2319e7199
github	www.github.com/Nheko-Reborn/nheko/releases/tag/v0.10.2
github	www.github.com/Nheko-Reborn/nheko/security/advisories/GHSA-8jcp-8jq4-5mm7

07 Nov 2023 22:06Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.9 - 8.6

EPSS0.00381