CVE-2022-2821
Assigner: @huntrdev
Published: 2022-08-15T10:30:35
State: PUBLISHED
affected: product: namelessmc/nameless
vendor: namelessmc
versions: lessThan: v2.0.2
status: affected
version: unspecified
versionType: custom
descriptions: value: Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-304
description: CWE-304 Missing Critical Step in Authentication
type: CWE
source: advisory: c216db15-fe2f-42a7-852a-6c47498cf069
discovery: EXTERNAL
title: Missing Critical Step in Authentication in namelessmc/nameless