CVE-2022-24669 - OpenCVE

It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Forgerock	Access Management

Configuration 1 [-]

OR	cpe:2.3:a:forgerock:access_management::::::::
	cpe:2.3:a:forgerock:access_management::::::::
	cpe:2.3:a:forgerock:access_management::::::::
	cpe:2.3:a:forgerock:access_management::::::::
	cpe:2.3:a:forgerock:access_management:6.5.1:::::::*
	cpe:2.3:a:forgerock:access_management:6.5.3:::::::*
	cpe:2.3:a:forgerock:access_management:6.5.4:::::::*
	cpe:2.3:a:forgerock:access_management:7.1.0:::::::*

References

Link	Resource
https://backstage.forgerock.com/downloads/browse/am/featured	Product
https://backstage.forgerock.com/knowledge/kb/article/a90639318	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ForgeRock

Published: 2022-10-20T00:00:00

Updated: 2022-10-27T00:00:00

Reserved: 2022-02-08T00:00:00

Link: CVE-2022-24669

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-10-27T17:15:09.683

Modified: 2022-10-31T14:12:36.877

Link: CVE-2022-24669

JSON object: View

Redhat Information

No data.

CWE

CWE-862

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "4162CDDD-B604-4B3C-AAA1-14D33FE1EF45", "versionEndIncluding": "6.0.0.7", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D9D6502-4993-46CE-9FDC-71808D76C416", "versionEndIncluding": "6.5.0.2", "versionStartIncluding": "6.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9AC242A-391E-463D-8C00-28CE22D6339E", "versionEndIncluding": "6.5.2.3", "versionStartIncluding": "6.5.2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "D66C82CB-63C8-4A3C-AD19-08CD666F8C9D", "versionEndIncluding": "7.0.2", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:6.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "E31AD7C7-9145-4EBC-A1A1-531B77BEFB0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:6.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "F3D7F2DE-8E77-4268-9F8B-D95954A31140", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:6.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "F4CB42E3-B330-4202-87A4-EC503D569C78", "vulnerable": true}, {"criteria": "cpe:2.3:a:forgerock:access_management:7.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "9725E909-8707-402E-939B-EC6FA6FA0984", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services."}, {"lang": "es", "value": "Quiz\u00e1s sea posible obtener algunos detalles del despliegue mediante un ataque bien elaborado. Esto puede permitir que esos datos se utilicen para sondear los servicios de la red interna."}], "id": "CVE-2022-24669", "lastModified": "2022-10-31T14:12:36.877", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "psirt@forgerock.com", "type": "Secondary"}]}, "published": "2022-10-27T17:15:09.683", "references": [{"source": "psirt@forgerock.com", "tags": ["Product"], "url": "https://backstage.forgerock.com/downloads/browse/am/featured"}, {"source": "psirt@forgerock.com", "tags": ["Vendor Advisory"], "url": "https://backstage.forgerock.com/knowledge/kb/article/a90639318"}], "sourceIdentifier": "psirt@forgerock.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-862"}], "source": "psirt@forgerock.com", "type": "Secondary"}]}