Lucene search

K
nvd[email protected]NVD:CVE-2022-31202
HistoryJul 17, 2022 - 11:15 p.m.

CVE-2022-31202

2022-07-1723:15:08
CWE-22
web.nvd.nist.gov
2
softguard web
directory traversal
export function

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.4%

The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via export or man.tcl.

Affected configurations

Nvd
Node
monitoringsoftsoftguard_webRange<5.1.5
VendorProductVersionCPE
monitoringsoftsoftguard_web*cpe:2.3:a:monitoringsoft:softguard_web:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.4%

Related for NVD:CVE-2022-31202