Lucene search
HistoryApr 05, 2023 - 10:15 p.m.
CVE-2022-31888
cve-2022-31888
osticket
session fixation
login
class.auth.php
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.002
Percentile
57.9%
Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.
Affected configurations
Node
enhancesoftosticketRange≤1.16.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| enhancesoft | osticket | * | cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:* |
Related
prion
prion
Session fixation
2023-04-05 22:15:00
osv
osv
CVE-2022-31888
2023-04-05 22:15:07
cvelist
cvelist
CVE-2022-31888
2023-04-05 00:00:00
cve
cve
CVE-2022-31888
2023-04-05 22:15:07
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.002
Percentile
57.9%
Related for NVD:CVE-2022-31888