CVE-2022-37426
Assigner: blackberry
Published: 2022-10-28T15:09:21.611406Z
State: PUBLISHED
problemTypes: descriptions: type: text
description: n/a
impacts: capecId: CAPEC-23
descriptions: value: CAPEC-23 File Content Injection
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
descriptions: value: Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
supportingMedia: type: text/html
base64: no
value: Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
solutions: value: Upgrade to OpenNebula 6.4.2 EE LTS
supportingMedia: type: text/html
base64: no
value: Upgrade to OpenNebula 6.4.2 EE LTS
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev