CVE-2022-38202

CVSS V2 None CVSS V3 None
Description
There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).
Overview
  • CVE ID
  • CVE-2022-38202
  • Assigner
  • psirt@esri.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-28T17:15:10
  • Last Modified Date
  • 2023-01-06T20:26:07
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:* 1 OR 10.9.1
History
Created Old Value New Value Data Type Notes
2022-12-28 18:17:57 Added to TrackCVE
2022-12-28 18:17:58 Weakness Enumeration new
2022-12-28 20:14:47 2022-12-28T19:22:46 CVE Modified Date updated
2022-12-28 20:14:47 Received Awaiting Analysis Vulnerability Status updated
2023-01-05 02:15:01 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-06 21:16:11 2023-01-06T20:26:07 CVE Modified Date updated
2023-01-06 21:16:11 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-06 21:16:13 Weakness Enumeration update
2023-01-06 21:16:16 CPE Information updated