CVE-2022-3826

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md	Exploit Third Party Advisory
https://vuldb.com/?id.212793	Permissions Required Third Party Advisory
https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md	Exploit Third Party Advisory
https://vuldb.com/?id.212793	Permissions Required Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:huaxiaerp:huaxia_erp:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:20

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~6.5~~	v2 : unknown v3 : 4.3
References	~~() https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md - Exploit, Third Party Advisory~~	() https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md - Exploit, Third Party Advisory
References	~~() https://vuldb.com/?id.212793 - Permissions Required, Third Party Advisory~~	() https://vuldb.com/?id.212793 - Permissions Required, Third Party Advisory

07 Nov 2023, 03:51

Type	Values Removed	Values Added
CWE	CWE-200 CWE-284

Information

Published : 2022-11-02 13:15

Updated : 2024-11-21 07:20

NVD link : CVE-2022-3826

Mitre link : CVE-2022-3826

CVE.ORG link : CVE-2022-3826

JSON object : View

Products Affected

huaxiaerp

huaxia_erp

CWE

CWE-266

Incorrect Privilege Assignment

{"id": "CVE-2022-3826", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-11-02T13:15:18.020", "references": [{"url": "https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md", "tags": ["Exploit", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/?id.212793", "tags": ["Permissions Required", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://vuldb.com/?id.212793", "tags": ["Permissions Required", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-266"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Huaxia ERP. Ha sido clasificada como problem\u00e1tica. Una parte desconocida del archivo /depotHead/list del componente Retail Management afecta a una parte desconocida. La manipulaci\u00f3n de la b\u00fasqueda de argumentos conduce a la divulgaci\u00f3n de informaci\u00f3n. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. A esta vulnerabilidad se le asign\u00f3 el identificador VDB-212793."}], "lastModified": "2024-11-21T07:20:18.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:huaxiaerp:huaxia_erp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAA662DD-3FFC-4F92-B761-A900DA91AC87"}], "operator": "OR"}]}], "sourceIdentifier": "cna@vuldb.com"}