Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-26834
HistoryJun 13, 2022 - 5:15 a.m.

CVE-2022-26834

2022-06-1305:15:11
[email protected]
web.nvd.nist.gov
3
rakuten casa
access control
remote attacker
information leakage
http connections
wan side

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

66.4%

JSON

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default.

Affected configurations

Nvd
Node
rakutencasaMatchap_f_v1_4_1
OR
rakutencasaMatchap_f_v2_0_0
VendorProductVersionCPE
rakutencasaap_f_v1_4_1cpe:2.3:a:rakuten:casa:ap_f_v1_4_1:*:*:*:*:*:*:*
rakutencasaap_f_v2_0_0cpe:2.3:a:rakuten:casa:ap_f_v2_0_0:*:*:*:*:*:*:*

Related

cnvd 1
prion 1
cvelist 1
cve 1
jvn 1
cnvd
cnvd
Rakuten Mobile Rakuten Casa Access Control Error Vulnerability
2022-05-23 00:00:00
prion
prion
Improper access control
2022-06-13 05:15:00
cvelist
cvelist
CVE-2022-26834
2022-06-13 04:50:27
cve
cve
CVE-2022-26834
2022-06-13 05:15:11
jvn
jvn
JVN#46892984: Multiple vulnerabilities in Rakuten Casa
2022-05-19 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

66.4%

JSON
Related for NVD:CVE-2022-26834
cnvd1prion1cvelist1cve1jvn1