Lucene search
China National Vulnerability DatabaseCNVD-2022-79656HistoryNov 18, 2022 - 12:00 a.m.
Apache MINA deserialization vulnerability
2022-11-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
21
apache mina
web application
framework
apache foundation
usa
high-performance
scalable
deserialization vulnerability
java
java.security.privatekey
ssh server
exploit
attacker
cnvd
0.01 Low
EPSS
Percentile
83.7%
Apache MINA is a web application framework from the Apache Foundation (USA). The product is mainly used to develop high-performance and highly scalable web applications. Apache MINA 2.9.1 and earlier versions have a deserialization vulnerability, which stems from the use of Java deserialization to load serialized java.security.PrivateKey, which can be exploited by an attacker to load the host key of an SSH server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache apache mina | le | 2.9.1 |
Related
veracode
veracode
Deserialization Of Untrusted Data
2022-11-17 08:30:02
ibm
ibm
Security Bulletin: A vulnerability has been identified in the IBM Spectrum Scale GUI where a remote authenticated user can execute commands [CVE-2022-45047]
2023-04-14 11:30:36
cve
cve
CVE-2022-45047
2022-11-16 09:15:14
prion
prion
Deserialization of untrusted data
2022-11-16 09:15:00
osv
osv
CVE-2022-45047
2022-11-16 09:15:14
Unsafe deserialization in Apache MINA SSHD
2022-11-16 12:00:18
github
github
Unsafe deserialization in Apache MINA SSHD
2022-11-16 12:00:18
f5
f5
K91021753 : Apache MINA vulnerability CVE-2022-45047
2022-11-18 00:00:00
nvd
nvd
CVE-2022-45047
2022-11-16 09:15:14
redhatcve
redhatcve
CVE-2022-45047
2022-11-23 13:56:39
cvelist
cvelist
CVE-2022-45047 Apache MINA SSHD: Java unsafe deserialization vulnerability
2022-11-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for apache (SUSE-SU-2024:0224-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0224-1)
2024-01-26 00:00:00
nessus
nessus
RHEL 8 : RHV 4.4 SP1 [ovirt-4.5.3-3] (RHSA-2023:0074)
2023-01-11 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache-parent, apache-sshd (SUSE-SU-2024:0224-1)
2024-01-26 00:00:00
Oracle Global Lifecycle Management (OPatch) (Jan 2023 CPU)
2023-07-06 00:00:00
redhat
redhat
qualysblog
qualysblog
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
Oracle Patch Tuesday, July 2023 Security Update Review
2023-07-19 15:56:06
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00