PT-2022-25849
CVE-2022-41412
·
تاريخ النشر
2022-11-30
·
تاريخ التحديث
2025-04-24
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
perfSONAR versions 4.4.5 and prior
Description
An issue in the graphData.cgi component allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.
Recommendations
For versions 4.4.5 and prior, consider disabling the graphData.cgi component until a patch is available to prevent exploitation.
Restrict access to sensitive data to minimize the risk of unauthorized access.
As a temporary workaround, restrict the functionality of the graphData.cgi component to prevent SSRF attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾