deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-45510
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/AdvSetWrlsafeset/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/AdvSetWrlsafeset/readme.md
CVE: CVE-2022-45511
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/QuickIndex/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/QuickIndex/readme.md
CVE: CVE-2022-45512
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeEmailFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeEmailFilter/readme.md
CVE: CVE-2022-45513
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/P2pListFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/P2pListFilter/readme.md
CVE: CVE-2022-45514
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/webExcptypemanFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/webExcptypemanFilter/readme.md
CVE: CVE-2022-45515
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/addressNat/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/addressNat/readme.md
CVE: CVE-2022-45516
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/NatStaticSetting/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/NatStaticSetting/readme.md
CVE: CVE-2022-45517
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/VirtualSer/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/VirtualSer/readme.md
CVE: CVE-2022-45518
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SetIpBind/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SetIpBind/readme.md
CVE: CVE-2022-45519
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeMacFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeMacFilter/readme.md
CVE: CVE-2022-45520
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/qossetting/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/qossetting/readme.md
CVE: CVE-2022-45521
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeUrlFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeUrlFilter/readme.md
CVE: CVE-2022-45522
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeClientFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/SafeClientFilter/readme.md
CVE: CVE-2022-45523
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/L7Im/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/L7Im/readme.md
CVE: CVE-2022-45524
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/IPSECsave/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/IPSECsave/readme.md
CVE: CVE-2022-45525
Published: 2022-12-08
Description: Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/CertListInfo/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/CertListInfo/readme.md
CVE: CVE-2022-45877
Published: 2022-12-08
Description: OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-319
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE: CVE-2022-4122
Published: 2022-12-08
Description: A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=2144983; https://github.com/containers/podman/pull/16315; https://bugzilla.redhat.com/show_bug.cgi?id=2144983
CVE: CVE-2022-4123
Published: 2022-12-08
Description: A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.
CVSS Score: 3.3 (LOW)
CWE: CWE-23, CWE-22, CWE-22
References: https://bugzilla.redhat.com/show_bug.cgi?id=2144989; https://bugzilla.redhat.com/show_bug.cgi?id=2144989
CVE: CVE-2022-38599
Published: 2022-12-08
Description: Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668, CWE-668
References: http://teleport.com; https://gist.github.com/arleyna/20d858e11c48984d00926fa8cc0c2722; http://teleport.com
CVE: CVE-2022-40939
Published: 2022-12-08
Description: In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://cdsbz.gitbook.io/untitled/secustion-camera-vulnerability-recurrence; https://cdsbz.gitbook.io/untitled/secustion-camera-vulnerability-recurrence
CVE: CVE-2022-46824
Published: 2022-12-08
Description: In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46825
Published: 2022-12-08
Description: In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-326
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46826
Published: 2022-12-08
Description: In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-35, CWE-22
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46827
Published: 2022-12-08
Description: In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
CVSS Score: 3.9 (LOW)
CWE: CWE-611, CWE-611
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46828
Published: 2022-12-08
Description: In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-691, CWE-434
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46829
Published: 2022-12-08
Description: In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46830
Published: 2022-12-08
Description: In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-46831
Published: 2022-12-08
Description: In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-453, CWE-1188
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-4366
Published: 2022-12-08
Description: Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/lirantal/daloradius/commit/3d11f375a76ddb[PII_REDACTED]e15f81d82dfb80ce; https://huntr.dev/bounties/f225d69a-d971-410d-a8f9-b0026143aed8; https://github.com/lirantal/daloradius/commit/3d11f375a76ddb[PII_REDACTED]e15f81d82dfb80ce
CVE: CVE-2022-41717
Published: 2022-12-08
Description: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://go.dev/cl/455635; https://go.dev/cl/455717; https://go.dev/issue/56350
CVE: CVE-2022-44938
Published: 2022-12-08
Description: Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/; https://pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/
CVE: CVE-2022-23469
Published: 2022-12-08
Description: Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials provided using the Authorization header are displayed in the debug logs. Attackers must have access to a users logging system in order for credentials to be stolen. This issue has been addressed in version 2.9.6. Users are advised to upgrade. Users unable to upgrade may set the log level to `INFO`, `WARN`, or `ERROR`.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-532
References: https://github.com/traefik/traefik/pull/9574; https://github.com/traefik/traefik/releases/tag/v2.9.6; https://github.com/traefik/traefik/security/advisories/GHSA-h2ph-vhm7-g4hp
CVE: CVE-2022-23494
Published: 2022-12-08
Description: tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and confirm dialogs when these dialogs were provided with malicious HTML content. This can occur in plugins that use the alert or confirm dialogs, such as in the `image` plugin, which presents these dialogs when certain errors occur. The vulnerability allowed arbitrary JavaScript execution when an alert presented in the TinyMCE UI for the current user. This vulnerability has been patched in TinyMCE 5.10.7 and TinyMCE 6.3.1 by ensuring HTML sanitization was still performed after unwrapping invalid elements. Users are advised to upgrade to either 5.10.7 or 6.3.1. Users unable to upgrade may ensure the the `images_upload_handler` returns a valid value as per the images_upload_handler documentation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/tinymce/tinymce/commit/6923d85eba6de3e08ebc9c5a387b5abdaa21150e; https://github.com/tinymce/tinymce/commit/8bb2d2646d4e1a718fce61a775fa22e9d317b32d; https://github.com/tinymce/tinymce/security/advisories/GHSA-gg8r-xjwq-4w92
CVE: CVE-2022-23495
Published: 2022-12-08
Description: go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. A `ProtoNode` may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A `ProtoNode` should only be able to encode to valid DAG-PB, attempting to encode invalid DAG-PB forms will result in an error from the codec. Manipulation of an existing (newly created or decoded) `ProtoNode` using the modifier methods did not account for certain states that would place the `ProtoNode` into an unencodeable form. Due to conformance with the [`github.com/ipfs/go-block-format#Block`](https://pkg.go.dev/github.com/ipfs/go-block-format#Block) and [`github.com/ipfs/go-ipld-format#Node`](https://pkg.go.dev/github.com/ipfs/go-ipld-format#Node) interfaces, certain methods, which internally require a re-encode if state has changed, will panic due to the inability to return an error. This issue has been addressed across a number of pull requests. Users are advised to upgrade to version 0.8.1 for a complete set of fixes. Users unable to upgrade may attempt to mitigate this issue by sanitising inputs when allowing user-input to set a new `CidBuilder` on a `ProtoNode` and by sanitising `Tsize` (`Link#Size`) values such that they are a reasonable byte-size for sub-DAGs where derived from user-input.

CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-252
References: https://en.wikipedia.org/wiki/Directed_acyclic_graph; https://github.com/ipfs/go-merkledag/issues/90; https://github.com/ipfs/go-merkledag/pull/91
CVE: CVE-2022-23496
Published: 2022-12-08
Description:  Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e; https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h; https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e
CVE: CVE-2022-33186
Published: 2022-12-08
Description: A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2121; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2121
CVE: CVE-2022-41949
Published: 2022-12-08
Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In affected versions an authenticated DHIS2 user can craft a request to DHIS2 to instruct the server to make requests to external resources (like third party servers). This could allow an attacker, for example, to identify vulnerable services which might not be otherwise exposed to the public internet or to determine whether a specific file is present on the DHIS2 server. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. At this time, there is no known workaround or mitigation for this vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://github.com/dhis2/dhis2-core/commit/dc3166c216da53e12a16bfdc51055823b838c1c3; https://github.com/dhis2/dhis2-core/security/advisories/GHSA-6qh9-rxc8-7943; https://github.com/dhis2/dhis2-core/commit/dc3166c216da53e12a16bfdc51055823b838c1c3
CVE: CVE-2022-46153
Published: 2022-12-08
Description: Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instance, a route secured using an mTLS connection set with a wrong CA file is exposed without verifying the client certificates. Users are advised to upgrade to version 2.9.6. Users unable to upgrade should check their logs to detect the error messages and fix your TLS options.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295, CWE-295
References: https://doc.traefik.io/traefik/v2.9/https/tls/#tls-options; https://github.com/traefik/traefik/commit/7e3fe48b80083b41e9ff82a474a36484cabc701a; https://github.com/traefik/traefik/releases/tag/v2.9.6
CVE: CVE-2022-46158
Published: 2022-12-08
Description: PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to upgrade to version 1.7.8.8. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://github.com/PrestaShop/PrestaShop/commit/8684d429fb7c3bb51efb098e8b92a1fd2958f8cf; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-9qgp-9wwc-v29r; https://github.com/PrestaShop/PrestaShop/commit/8684d429fb7c3bb51efb098e8b92a1fd2958f8cf
CVE: CVE-2022-41947
Published: 2022-12-08
Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features of DHIS2, an authenticated user may be able to upload a file which includes embedded javascript. The user could then potentially trick another authenticated user to open the malicious file in a browser which would trigger the javascript code, resulting in a cross-site scripting (XSS) attack. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. Users unable to upgrade may add the following simple CSP rule in your web proxy to the vulnerable endpoints: `script-src 'none'`. This workaround will prevent all javascript from running on those endpoints.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP; https://github.com/dhis2/dhis2-core/security/advisories/GHSA-763w-rm78-6xcg; https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
CVE: CVE-2022-41948
Published: 2022-12-08
Description: DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subject to a privilege escalation vulnerability. A DHIS2 user with authority to manage users can assign superuser privileges to themself by manually crafting an HTTP PUT request. Only users with the following DHIS2 user role authorities can exploit this vulnerability. Note that in many systems the only users with user admin privileges are also superusers. In these cases, the escalation vulnerability does not exist. The vulnerability is only exploitable by attackers who can authenticate as users with the user admin authority.  As this is usually a small and relatively trusted set of users, exploit vectors will often be limited. DHIS2 administrators should upgrade to the following hotfix releases: 2.36.12.1, 2.37.8.1, 2.38.2.1, 2.39.0.1. The only known workaround to this issue is to avoid the assignment of the user management authority to any users until the patch has been applied.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://github.com/dhis2/dhis2-core/security/advisories/GHSA-59fm-8432-2426; https://github.com/dhis2/dhis2-core/security/advisories/GHSA-59fm-8432-2426
CVE: CVE-2022-38765
Published: 2022-12-09
Description: Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://www.vitalimages.com/customer-success-support-program/vital-images-software-security-updates/; https://www.vitalimages.com/customer-success-support-program/vital-images-software-security-updates/
CVE: CVE-2022-33187
Published: 2022-12-09
Description: Brocade SANnav before v2.2.1 logs usernames and encoded passwords in 
debug-enabled logs. The vulnerability could allow an attacker with admin
 privilege to read sensitive information.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2122; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2122