CVE-2022-1731 - OpenCVE

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:M/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Allgeier	Metasonic Doc Webclient

Configuration 1 [-]

OR	cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.3.0:::::::*
	cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.12.0:::::::*
	cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.14.0:::::::*

References

Link	Resource
https://www.tenable.com/security/research/tra-2022-17	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: tenable

Published: 2022-05-16T18:25:41

Updated: 2022-05-16T18:25:41

Reserved: 2022-05-16T00:00:00

Link: CVE-2022-1731

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-05-16T19:15:07.903

Modified: 2022-05-25T02:47:55.757

Link: CVE-2022-1731

JSON object: View

Redhat Information

No data.

CWE

CWE-89

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "A4D258F2-13DC-4B87-B371-896850EE9EFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "022C9410-EE1B-4B49-AB3B-EAC503ACC4DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:allgeier:metasonic_doc_webclient:7.0.14.0:*:*:*:*:*:*:*", "matchCriteriaId": "7ADE391A-0C63-49A1-96D9-933FE9356572", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist."}, {"lang": "es", "value": "Metasonic Doc WebClient versiones 7.0.14.0 / 7.0.12.0 / 7.0.3.0, son vulnerables a un ataque de inyecci\u00f3n SQL en el campo username. Es requerido que el SSO o la autenticaci\u00f3n del sistema est\u00e9n habilitados para que se presenten las condiciones de vulnerabilidad"}], "id": "CVE-2022-1731", "lastModified": "2022-05-25T02:47:55.757", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-16T19:15:07.903", "references": [{"source": "vulnreport@tenable.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2022-17"}], "sourceIdentifier": "vulnreport@tenable.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}