CVE-2022-32287

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior versions. Note that PEAR files should never be installed into an UIMA installation from untrusted sources because PEAR archives are executable plugins that will be able to perform any actions with the same privileges as the host Java Virtual Machine.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2022/11/03/4	Mailing List Third Party Advisory
https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd	Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/11/03/4	Mailing List Third Party Advisory
https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd	Mailing List Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:uimaj:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:06

Type	Values Removed	Values Added
References	~~() http://www.openwall.com/lists/oss-security/2022/11/03/4 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2022/11/03/4 - Mailing List, Third Party Advisory
References	~~() https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd - Mailing List, Vendor Advisory~~	() https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd - Mailing List, Vendor Advisory

Information

Published : 2022-11-03 12:15

Updated : 2024-11-21 07:06

NVD link : CVE-2022-32287

Mitre link : CVE-2022-32287

CVE.ORG link : CVE-2022-32287

JSON object : View

Products Affected

apache

uimaj

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2022-32287", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-11-03T12:15:09.743", "references": [{"url": "http://www.openwall.com/lists/oss-security/2022/11/03/4", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2022/11/03/4", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.apache.org/thread/57vk0d79j94d0lk0vol8xn935yv1shdd", "tags": ["Mailing List", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior versions. Note that PEAR files should never be installed into an UIMA installation from untrusted sources because PEAR archives are executable plugins that will be able to perform any actions with the same privileges as the host Java Virtual Machine."}, {"lang": "es", "value": "Una vulnerabilidad de path traversal en una clase FileUtil utilizada por el componente de administraci\u00f3n PEAR de Apache UIMA permite a un atacante crear archivos fuera del directorio de destino designado utilizando nombres de entrada ZIP cuidadosamente manipulados. Este problema afecta a Apache UIMA Apache UIMA versi\u00f3n 3.3.0 y versiones anteriores. Tenga en cuenta que los archivos PEAR nunca deben instalarse en una instalaci\u00f3n UIMA desde fuentes que no sean de confianza porque los archivos PEAR son complementos ejecutables que podr\u00e1n realizar cualquier acci\u00f3n con los mismos privilegios que la m\u00e1quina virtual Java host."}], "lastModified": "2024-11-21T07:06:06.527", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:uimaj:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38551E47-3B39-469A-A59C-FA02819BD0B8", "versionEndIncluding": "3.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}