CVE-2022-2822 - Authentication Bypass by Primary Weakness in octoprint/octoprint

Back Back to CVE browser

HIGH

Authentication Bypass by Primary Weakness in octoprint/octoprint

Published Aug 15, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.85%

Description

An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.

Affected products

Vendor Octoprint Product Octoprint/octoprint Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <1.9.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Octoprint

Octoprint/octoprint

n/a

Version	Status	Constraints
unspecified	affected	<1.9.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6490
Advisory
https://github.com/advisories/GHSA-5w5x-q9p5-9qg3
Advisory
https://github.com/octoprint/octoprint/commit/82c892ba40b3741d1b7711d949e56af64f5bc2de
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/6369f355-e6ef-4469-af75-0f6ff00cde3d
x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2822

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6490		Advisory
https://github.com/advisories/GHSA-5w5x-q9p5-9qg3		Advisory
https://github.com/octoprint/octoprint/commit/82c892ba40b3741d1b7711d949e56af64f5bc2de		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/6369f355-e6ef-4469-af75-0f6ff00cde3d		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2822