Lucene search

MitreCVE-2022-42067

HistoryOct 14, 2022 - 4:15 p.m.

CVE-2022-42067

2022-10-1416:15:30

CWE-639

mitre

web.nvd.nist.gov

nvd

cve-2022-42067

insecure direct object reference

online birth certificate management system

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

26.3%

JSON

Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability

Affected configurations

Nvd

Node

online_birth_certificate_management_system_projectonline_birth_certificate_management_systemMatch1.0

VendorProductVersionCPE
online_birth_certificate_management_system_projectonline_birth_certificate_management_system1.0cpe:2.3:a:online_birth_certificate_management_system_project:online_birth_certificate_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
online_birth_certificate_management_system_project	online_birth_certificate_management_system	1.0	cpe:2.3:a:online_birth_certificate_management_system_project:online_birth_certificate_management_system:1.0:::::::*

References

packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.html

www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html

Social References

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

26.3%

JSON

Related for CVE-2022-42067