CVE-2022-22733

Опубликовано: 20 янв. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Высокий

Описание

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.

Ссылки

http://www.openwall.com/lists/oss-security/2022/01/20/2
Mailing List
Third Party Advisory
https://lists.apache.org/thread/qpdsm936n9bhksb0rzn6bq1h7ord2nm6
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/01/20/2
Mailing List
Third Party Advisory
https://lists.apache.org/thread/qpdsm936n9bhksb0rzn6bq1h7ord2nm6
Mailing List
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:shardingsphere_elasticjob-ui:3.0.0:-:*:*:*:*:*:*

cpe:2.3:a:apache:shardingsphere_elasticjob-ui:3.0.0:alpha:*:*:*:*:*:*

cpe:2.3:a:apache:shardingsphere_elasticjob-ui:3.0.0:beta:*:*:*:*:*:*

cpe:2.3:a:apache:shardingsphere_elasticjob-ui:3.0.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.86064

Высокий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-3g8v-6552-p38w

github

около 4 лет назад