Lucene search
HistoryDec 29, 2022 - 12:15 a.m.
CVE-2022-4779
streamx applications
authentication bypass
logic bug
web server
cve-2022-4779
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.6%
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme.
StreamX applications using StreamView HTML component with the public web server feature activated are affected.
Affected configurations
Node
elvexysstreamxRange6.02.01–6.04.34
Related
prion
prion
Authentication flaw
2022-12-29 00:15:00
cvelist
cvelist
cve
cve
CVE-2022-4779
2022-12-29 00:15:09
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.6%
Related for NVD:CVE-2022-4779