CVE-2022-37298

Katalog CVE

CVSS 9.8 · Critical EPSS 2,3%

Kerentanan Improper Authentication pada shinken-monitoring shinken monitoring. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

Rincian

Terbit di NVD

20 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 82,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/dbyio/cve-2022-37298 patch · advisory pihak ketiga
• https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2 patch · advisory pihak ketiga