CVE-2022-2822: falha de baixa gravidade em octoprint/octoprint
Authentication Bypass by Primary Weakness in octoprint/octoprint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.9%
An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
octoprint · octoprint/octoprintCVEs relacionadas — octoprint/octoprint
No mesmo produto, das mais perigosas para as menos.
CVE-2022-1430HIGHCross-site Scripting (XSS) - DOM in octoprint/octoprintEPSS 1.4%CVE-2022-1432HIGHCross-site Scripting (XSS) - Generic in octoprint/octoprintEPSS 1.2%CVE-2022-2872LOWUnrestricted Upload of File with Dangerous Type in octoprint/octoprintEPSS 0.7%CVE-2022-3068MEDIUMImproper Privilege Management in octoprint/octoprintEPSS 0.5%CVE-2022-3607MEDIUMFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprintEPSS 0.4%CVE-2022-2930MEDIUMUnverified Password Change in octoprint/octoprintEPSS 0.3%