CVE-2022-29097 in WMS

Tóm tắt

Bởi MITRE • 24/06/2022

Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: Dell
• Đặt trước: 12/04/2022
• Tiết lộ: 24/06/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-202728
• CPE: sẵn sàng
• CWE: CWE-23 (Đã xác nhận)
• CVSS: 4.0 (NVD)
• EPSS: 0.01238
• KEV: không
• Các hoạt động: rất thấp
• ngành: Pharma, Hospital, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-29097
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-29097
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-29097/