Lucene search

GoogleOSV:CVE-2022-38870

HistoryOct 25, 2022 - 5:15 p.m.

CVE-2022-38870

2022-10-2517:15:55

Google

osv.dev

free5gc v3.2.1

information disclosure

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Free5gc v3.2.1 is vulnerable to Information disclosure.

CPENameOperatorVersion
free5gceq3.0.6
free5gceq3.0.4
free5gceq3.0.5
free5gceq3.1.0
free5gceq3.0.2
free5gceq3.0.7
free5gceq3.0.1
free5gceq3.2.0
free5gceq3.2.1
free5gceq3.1.1

Name	Operator	Version
free5gc	eq	3.0.6
free5gc	eq	3.0.4
free5gc	eq	3.0.5
free5gc	eq	3.1.0
free5gc	eq	3.0.2
free5gc	eq	3.0.7
free5gc	eq	3.0.1
free5gc	eq	3.2.0
free5gc	eq	3.2.1
free5gc	eq	3.1.1

References

github.com/free5gc/free5gc/issues/387

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Related for OSV:CVE-2022-38870