PT-2023-14081 · Nvidia · Nvidia Bmc

CVE-2022-42280

·

Publicado

2023-01-13

·

Atualizado

2023-01-24

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NVIDIA BMC (affected versions not specified)
Description The issue is related to a path traversal vulnerability in the SPX REST auth handler of NVIDIA BMC. This vulnerability can be exploited by an unauthorized attacker, potentially leading to authentication bypass.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-42280

Produtos afetados

Nvidia Bmc