Lucene search

MitreCVE-2022-22836

HistoryJan 10, 2022 - 2:12 p.m.

CVE-2022-22836

2022-01-1014:12:57

CWE-22

mitre

web.nvd.nist.gov

131

coreftp server

directory traversal

http put

cve-2022-22836

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via …/ in an HTTP PUT request.

Affected configurations

Nvd

Node

coreftpcore_ftpRange≤1.2

coreftpcore_ftpMatch2.0build_639

coreftpcore_ftpMatch2.0build_640

coreftpcore_ftpMatch2.0build_641

coreftpcore_ftpMatch2.0build_642

coreftpcore_ftpMatch2.0build_645

coreftpcore_ftpMatch2.0build_647

coreftpcore_ftpMatch2.0build_649

coreftpcore_ftpMatch2.0build_651

coreftpcore_ftpMatch2.0build_653

coreftpcore_ftpMatch2.0build_655

coreftpcore_ftpMatch2.0build_656

coreftpcore_ftpMatch2.0build_657

coreftpcore_ftpMatch2.0build_658

coreftpcore_ftpMatch2.0build_659

coreftpcore_ftpMatch2.0build_665

coreftpcore_ftpMatch2.0build_667

coreftpcore_ftpMatch2.0build_668

coreftpcore_ftpMatch2.0build_671

coreftpcore_ftpMatch2.0build_673

coreftpcore_ftpMatch2.0build_674

coreftpcore_ftpMatch2.0build_676

coreftpcore_ftpMatch2.0build_677

coreftpcore_ftpMatch2.0build_679

coreftpcore_ftpMatch2.0build_682

coreftpcore_ftpMatch2.0build_687

coreftpcore_ftpMatch2.0build_689

coreftpcore_ftpMatch2.0build_691

coreftpcore_ftpMatch2.0build_694

coreftpcore_ftpMatch2.0build_695

coreftpcore_ftpMatch2.0build_697

coreftpcore_ftpMatch2.0build_699

coreftpcore_ftpMatch2.0build_702

coreftpcore_ftpMatch2.0build_704

coreftpcore_ftpMatch2.0build_705

coreftpcore_ftpMatch2.0build_711

coreftpcore_ftpMatch2.0build_713

coreftpcore_ftpMatch2.0build_715

coreftpcore_ftpMatch2.0build_719

coreftpcore_ftpMatch2.0build_725

VendorProductVersionCPE
coreftpcore_ftp*cpe:2.3:a:coreftp:core_ftp:*:*:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_639:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_640:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_641:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_642:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_645:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_647:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_649:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_651:*:*:*:*:*:*
coreftpcore_ftp2.0cpe:2.3:a:coreftp:core_ftp:2.0:build_653:*:*:*:*:*:*

Vendor	Product	Version	CPE
coreftp	core_ftp	*	cpe:2.3:a:coreftp:core_ftp::::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_639::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_640::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_641::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_642::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_645::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_647::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_649::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_651::::::
coreftp	core_ftp	2.0	cpe:2.3:a:coreftp:core_ftp:2.0:build_653::::::

Rows per page:

1-10 of 401

References

www.coreftp.com/forums/viewtopic.php?f=15&t=4022509

yoursecuritybores.me/coreftp-vulnerabilities/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

Related for CVE-2022-22836