Lucene search

[email protected]CVE-2022-48367

HistoryMar 12, 2023 - 5:15 a.m.

CVE-2022-48367

2023-03-1205:15:12

CWE-862

[email protected]

web.nvd.nist.gov

cve-2022-48367

ez publish

ibexa kernel

access control

security issue

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.

Affected configurations

NVD

Node

ibexadigital_experience_platformRange3.3.0–3.3.18

ibexadigital_experience_platformRange4.0.0–4.0.5

ibexadigital_experience_platformRange4.1.0–4.1.2

ibexaezplatform-http-cache-fastlyRange1.1.0–1.1.9

ibexaezplatform-http-cache-fastlyRange2.0.0–2.0.11

ibexafastlyRange4.0.0–4.0.5

ibexafastlyRange4.1.0–4.1.2

ibexaez_platform_kernelRange1.3.0–1.3.17

ibexaez_platform_kernelRange7.5.0–7.5.28

ibexakernelRange4.0.0–4.0.7

ibexakernelRange4.1.0–4.1.4

CPENameOperatorVersion
ibexa:digital_experience_platformibexa digital experience platformlt3.3.18
ibexa:digital_experience_platformibexa digital experience platformlt4.0.5
ibexa:digital_experience_platformibexa digital experience platformlt4.1.2
ibexa:ezplatform-http-cache-fastlyibexa ezplatform-http-cache-fastlylt1.1.9
ibexa:ezplatform-http-cache-fastlyibexa ezplatform-http-cache-fastlylt2.0.11
ibexa:fastlyibexa fastlylt4.0.5
ibexa:fastlyibexa fastlylt4.1.2
ibexa:ez_platform_kernelibexa ez platform kernellt1.3.17
ibexa:ez_platform_kernelibexa ez platform kernellt7.5.28
ibexa:kernelibexa kernellt4.0.7

CPE	Name	Operator	Version
ibexa:digital_experience_platform	ibexa digital experience platform	lt	3.3.18
ibexa:digital_experience_platform	ibexa digital experience platform	lt	4.0.5
ibexa:digital_experience_platform	ibexa digital experience platform	lt	4.1.2
ibexa:ezplatform-http-cache-fastly	ibexa ezplatform-http-cache-fastly	lt	1.1.9
ibexa:ezplatform-http-cache-fastly	ibexa ezplatform-http-cache-fastly	lt	2.0.11
ibexa:fastly	ibexa fastly	lt	4.0.5
ibexa:fastly	ibexa fastly	lt	4.1.2
ibexa:ez_platform_kernel	ibexa ez platform kernel	lt	1.3.17
ibexa:ez_platform_kernel	ibexa ez platform kernel	lt	7.5.28
ibexa:kernel	ibexa kernel	lt	4.0.7