Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-21817

Опубликовано: 02 фев. 2022
Источник: nvd
CVSS3: 9.3
CVSS2: 5.8
EPSS Низкий

Описание

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:nvidia:omniverse_launcher:*:*:*:*:*:*:*:*
Версия до 1.5.2 (исключая)

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.00908
Низкий

9.3 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 9.3
github
почти 4 года назад

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

EPSS

Процентиль: 75%
0.00908
Низкий

9.3 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo