Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:46921
HistoryMay 15, 2024 - 7:10 a.m.

Insufficient Verification Of Data Authenticity

2024-05-1507:10:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
insufficient verification
data authenticity
proxy protocol
vulnerability
source address
attacker

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

sshpiper is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to the proxy protocol listener which does specify a specific listener, allowing an attacker forage the proxy source address.

Related

osv 3
nvd 1
cve 1
vulnrichment 1
cvelist 1
github 1
osv
osv
sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address
2024-05-14 22:31:14
CVE-2024-35175
2024-05-14 22:15:10
sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address in github.com/tg123/sshpiper
2024-06-04 15:19:21
nvd
nvd
CVE-2024-35175
2024-05-14 22:15:10
cve
cve
CVE-2024-35175
2024-05-14 22:15:10
vulnrichment
vulnrichment
CVE-2024-35175 sshpiper's Enabling of Proxy Protocol without proper feature flagging allows faking source address
2024-05-14 22:05:11
cvelist
cvelist
CVE-2024-35175 sshpiper's Enabling of Proxy Protocol without proper feature flagging allows faking source address
2024-05-14 22:05:11
github
github
sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address
2024-05-14 22:31:14

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON
Related for VERACODE:46921
osv3nvd1cve1vulnrichment1cvelist1github1