Lucene search

K
nvd[email protected]NVD:CVE-2022-46370
HistoryJan 12, 2023 - 4:15 p.m.

CVE-2022-46370

2023-01-1216:15:10
CWE-345
web.nvd.nist.gov
2
rumpus
ftp server
version 9.0.7.1
improper token verification
identity verification
cve-2022-46370

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

31.6%

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.

Affected configurations

Nvd
Node
maxumrumpusRange9.0.7.1
VendorProductVersionCPE
maxumrumpus*cpe:2.3:a:maxum:rumpus:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

31.6%

Related for NVD:CVE-2022-46370