Lucene search

[email protected]CVE-2022-40292

HistoryOct 31, 2022 - 9:15 p.m.

CVE-2022-40292

2022-10-3121:15:13

CWE-209

[email protected]

web.nvd.nist.gov

cve-2022-40292

application security

user enumeration

unauthenticated access

unsecured endpoint

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.

Affected configurations

NVD

Node

phppointofsalephp_point_of_saleMatch19.0

CPENameOperatorVersion
phppointofsale:php_point_of_salephppointofsale php point of saleeq19.0

CPE	Name	Operator	Version
phppointofsale:php_point_of_sale	phppointofsale php point of sale	eq	19.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PHP Point of Sale",
    "vendor": "PHP Point of Sale LLC",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

References

www.themissinglink.com.au/security-advisories/cve-2022-40292

Social References

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

Related for CVE-2022-40292

cvelist1 prion1 nvd1