CVE-2022-31032 in Tuleap

要約

〜によって MITRE • 2022年06月29日

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.58 authorizations are not properly verified when creating projects or trackers from projects marked as templates. Users can get access to information in those template projects because the permissions model is not properly enforced. Users are advised to upgrade. There are no known workarounds for this issue.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 責任者: GitHub, Inc.
• 予約する: 2022年05月18日
• 公開: 2022年06月29日
• モデレーション: 承諾済み
• エントリ: VDB-202967
• CPE: 準備完了
• CWE: CWE-200 (確認済み)
• CVSS: 4.0 (NVD)
• EPSS: 0.00890
• KEV: いいえ
• アクティビティ: 非常低い

ソース

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-31032
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-31032
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-31032/