admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 17:51:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2022/CVE-2022-261xx/CVE-2022-26119.json

184 lines
6.1 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2022-26119",
"sourceIdentifier": "psirt@fortinet.com",
"published": "2022-11-02T12:15:50.427",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"lastModified": "2024-11-21T06:53:28.180",
"vulnStatus": "Modified",
Auto-Update: 2024-07-14T02:00:17.787041+00:00
2024-07-14 02:06:08 +00:00
"cveTags": [],
bootstrap
2023-04-24 12:24:31 +02:00
"descriptions": [
{
"lang": "en",
"value": "A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password."
Auto-Update: 2024-04-04T08:42:25.815847+00:00
2024-04-04 08:46:00 +00:00
},
{
"lang": "es",
"value": "Una vulnerabilidad de autenticaci\u00f3n incorrecta en Fortinet FortiSIEM anterior a 6.5.0 permite a un atacante local con acceso CLI realizar operaciones en el servidor Glassfish directamente a trav\u00e9s de una contrase\u00f1a codificada."
bootstrap
2023-04-24 12:24:31 +02:00
}
],
"metrics": {
"cvssMetricV31": [
{
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"source": "psirt@fortinet.com",
"type": "Secondary",
bootstrap
2023-04-24 12:24:31 +02:00
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"baseScore": 7.8,
"baseSeverity": "HIGH",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"availabilityImpact": "HIGH"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"source": "nvd@nist.gov",
"type": "Primary",
bootstrap
2023-04-24 12:24:31 +02:00
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"baseScore": 7.8,
"baseSeverity": "HIGH",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"availabilityImpact": "HIGH"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
Auto-Update: 2024-04-04T08:42:25.815847+00:00
2024-04-04 08:46:00 +00:00
"value": "CWE-798"
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.1.0",
"versionEndIncluding": "5.1.3",
"matchCriteriaId": "D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.2.5",
"versionEndIncluding": "5.2.8",
"matchCriteriaId": "C5F193AB-AC8D-4889-B34D-DEAF83E40B71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.3.0",
"versionEndIncluding": "5.3.3",
"matchCriteriaId": "A0258A88-352D-4F9A-894D-F7442CAFE461"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.0",
"versionEndIncluding": "6.1.2",
"matchCriteriaId": "24480037-F5CE-4CCE-800D-8C707B7F36AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.3.0",
"versionEndIncluding": "6.3.3",
"matchCriteriaId": "D9FC4C46-F269-4635-80BE-BED292538FEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "966F62A1-10E7-4AFF-8725-2A4425179CA9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D9040EA7-86F7-4553-A0C8-A6C76B0C9E75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AE69B846-3B23-401D-98D0-46DC976A25FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DE4C2A49-23CB-4104-A345-46B3B4A29A24"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "91E43A1B-D4C5-4FFF-9D3E-00140023921E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51452B16-AB83-41D3-8779-3E1AEA818AD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3F453DE5-E31D-4BD1-8978-DD6D166045E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BFFA27A5-0168-4261-9A04-D2DBB0A9946D"
}
]
}
]
}
],
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-22-064",
"source": "psirt@fortinet.com",
"tags": [
"Patch",
"Vendor Advisory"
]
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
},
{
"url": "https://fortiguard.com/psirt/FG-IR-22-064",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
Reference in New Issue Copy Permalink