CVE-2022-3363 - OpenCVE

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Physical

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Ikus-soft	Rdiffweb

Configuration 1 [-]

OR	cpe:2.3:a:ikus-soft:rdiffweb::::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha3::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha4::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha5::::::
	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha6::::::

References

Link	Resource
https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2	Patch Third Party Advisory
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e	Permissions Required Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: @huntrdev

Published: 2022-10-26T00:00:00

Updated: 2022-10-26T00:00:00

Reserved: 2022-09-29T00:00:00

Link: CVE-2022-3363

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-10-26T21:15:10.537

Modified: 2022-11-01T14:12:05.687

Link: CVE-2022-3363

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*", "matchCriteriaId": "F257A723-7B4C-47E8-8E5E-16BB1A418F66", "versionEndExcluding": "2.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "E967F2E5-0F47-436B-9DC7-4F8D051F5615", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2:*:*:*:*:*:*", "matchCriteriaId": "039D2014-4F4C-4B3F-81B1-EFA08EE3D513", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha3:*:*:*:*:*:*", "matchCriteriaId": "37EFE887-5C53-48EA-974C-25F36D6014EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha4:*:*:*:*:*:*", "matchCriteriaId": "7DA70603-82D5-4EAF-BF6B-A2FF2549D592", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha5:*:*:*:*:*:*", "matchCriteriaId": "BFC076DD-CBC9-4493-A996-807F97C6D56A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha6:*:*:*:*:*:*", "matchCriteriaId": "DB2967A3-17F1-4AFD-A6B4-4969C52541DD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7."}, {"lang": "es", "value": "Unos Errores de L\u00f3gica de Negocio en el repositorio de GitHub ikus060/rdiffweb versiones anteriores a 2.5.0a7"}], "id": "CVE-2022-3363", "lastModified": "2022-11-01T14:12:05.687", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.8, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 0.2, "impactScore": 2.5, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-26T21:15:10.537", "references": [{"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2"}, {"source": "security@huntr.dev", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-840"}], "source": "security@huntr.dev", "type": "Secondary"}]}