CVE-2022-39337

CVSS V2 None CVSS V3 None
Description
Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization. Version 1.2.1 contains a patch for this issue.
Overview
  • CVE ID
  • CVE-2022-39337
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-12-22T15:06:04.941Z
  • Last Modified Date
  • 2023-12-22T15:06:04.941Z
Weakness Enumerations
CWE URL
CWE-284 http://cwe.mitre.org/data/definitions/284.html
CWE-863 http://cwe.mitre.org/data/definitions/863.html
References
Reference URL Reference Tags
https://github.com/dromara/hertzbeat/security/advisories/GHSA-434f-f5cw-3rj6 x_refsource_CONFIRM
https://github.com/dromara/hertzbeat/issues/377 x_refsource_MISC
https://github.com/dromara/hertzbeat/pull/382 x_refsource_MISC
https://github.com/dromara/hertzbeat/commit/ac5970c6ceb64fafe237fc895243df5f21e40876 x_refsource_MISC
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-39337
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39337
History
Created Old Value New Value Data Type Notes
2024-06-24 18:16:30 Added to TrackCVE