Lucene search
HistoryAug 18, 2022 - 7:15 p.m.
CVE-2022-37422
payara server; directory traversal; authentication bypass
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.9%
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
Affected configurations
Node
payarapayaraRange<4.1.2.191.36enterprise
ORpayarapayaraRange<5.2022.3community
ORpayarapayaraRange5.0.0–5.42.0enterprise
Related
osv
osv
Path Traversal in Payara
2022-08-19 00:00:20
CVE-2022-45129
2022-11-10 06:15:13
prion
prion
Directory traversal
2022-08-18 19:15:00
Code injection
2022-11-10 06:15:00
cvelist
cvelist
CVE-2022-37422
2022-08-18 18:02:01
CVE-2022-45129
2022-11-10 00:00:00
github
github
Path Traversal in Payara
2022-08-19 00:00:20
cve
cve
CVE-2022-37422
2022-08-18 19:15:14
CVE-2022-45129
2022-11-10 06:15:13
redhatcve
redhatcve
CVE-2022-37422
2022-08-19 14:08:42
veracode
veracode
Path Traversal
2022-08-19 04:06:35
nvd
nvd
CVE-2022-45129
2022-11-10 06:15:13
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.9%
Related for NVD:CVE-2022-37422