CVE-2022-42443

2024-02-1717:15:07

CWE-434

ibm

web.nvd.nist.gov

trusteer

sdk

security

vulnerability

file uploading

ibm x-force

nvd

cve-2022-42443

CVSS3

2.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

AI Score

3.5

Confidence

High

EPSS

Percentile

9.0%

JSON

An undisclosed issue in Trusteer iOS SDK for mobile versions prior to 5.7 and Trusteer Android SDK for mobile versions prior to 5.7 may allow uploading of files. IBM X-Force ID: 238535.

Affected configurations

Vulners

Node

ibmsecurity_trusteer_pinpoint_detectMatch5.7

VendorProductVersionCPE
ibmsecurity_trusteer_pinpoint_detect5.7cpe:2.3:a:ibm:security_trusteer_pinpoint_detect:5.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	security_trusteer_pinpoint_detect	5.7	cpe:2.3:a:ibm:security_trusteer_pinpoint_detect:5.7:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Trusteer iOS SDK",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "5.7"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Trusteer Android SDK",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "5.7"
      }
    ]
  }
]