CVE-2022-1155highCWE-840

CVE-2022-1155: falha de alta gravidade em snipe/snipe-it

Old sessions are not blocked by the login enable function. in snipe/snipe-it

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar snipe/snipe-it+ Monitorar snipe/snipe-it

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 1.0%
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
snipe · snipe/snipe-it
CVEs relacionadas — snipe/snipe-it

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0611MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.2%CVE-2022-1511MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.1%CVE-2022-0579MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.1%CVE-2022-0569MEDIUMObservable Discrepancy in snipe/snipe-itEPSS 1.0%CVE-2022-0622MEDIUMGeneration of Error Message Containing Sensitive Information in snipe/snipe-itEPSS 1.0%CVE-2022-2997MEDIUMSession Fixation in snipe/snipe-itEPSS 0.9%