CVE-2022-47551

Katalog CVE

CVSS 6.5 · Medium EPSS 0,62%

Kerentanan Incorrect Default Permissions pada apiman. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before 3.0.0.Final. Because of this, 3.0.0.Final is not affected by the vulnerability.

Rincian

Terbit di NVD

20 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.apiman.io/blog/permissions-bypass-disclosure/ advisory vendor
• https://www.github.com/apiman/apiman advisory pihak ketiga