CVE-2022-37298

Опубликовано: 20 окт. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

Ссылки

https://github.com/dbyio/cve-2022-37298
Patch
Third Party Advisory
https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2
Patch
Third Party Advisory
https://github.com/dbyio/cve-2022-37298
Patch
Third Party Advisory
https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:shinken-monitoring:shinken_monitoring:2.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09428

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVE-2022-37298

CVSS3: 9.8

ubuntu

больше 3 лет назад

GHSA-p373-jqfm-j6wr

CVSS3: 9.8

github

больше 3 лет назад

Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control

EPSS

Процентиль: 93%

0.09428

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287