Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-31125

Опубликовано: 06 июл. 2022
Источник: nvd
CVSS3: 10
CVSS3: 9.8
CVSS2: 7.5
EPSS Средний

Описание

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*
Версия до 6.1.1.0 (исключая)

EPSS

Процентиль: 94%
0.12856
Средний

10 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

EPSS

Процентиль: 94%
0.12856
Средний

10 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287