[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2022-1996Date: (C)2022-06-08   (M)2024-04-29


Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 9.1CVSS Score : 6.4
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 5.2Impact Score: 4.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: HIGHAvailability: NONE
Integrity: HIGH 
Availability: NONE 
  
Reference:
FEDORA-2022-185697ef56
FEDORA-2022-30c5ed5625
FEDORA-2022-589a0ad690
FEDORA-2022-ba365d3703
FEDORA-2022-fae3ecee19
FEDORA-2023-4e2068ba5d
FEDORA-2023-6550d9323b
FEDORA-2023-c9b2182a4e
https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
https://security.netapp.com/advisory/ntap-20220923-0005/

CWE    1
CWE-639
OVAL    739
oval:org.secpod.oval:def:3300843
oval:org.secpod.oval:def:3301048
oval:org.secpod.oval:def:3301002
oval:org.secpod.oval:def:3301078
...

© SecPod Technologies