CVE-2022-45027

CVSS V2 None CVSS V3 None
Description
perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
Overview
  • CVE ID
  • CVE-2022-45027
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-01T08:15:10
  • Last Modified Date
  • 2023-02-16T19:18:04
Weakness Enumerations
CWE URL
CWE-918 http://cwe.mitre.org/data/definitions/918.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:perfsonar:perfsonar:*:*:*:*:*:*:*:* 1 OR 4.4.6
References
Reference URL Reference Tags
https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html Release Notes Vendor Advisory
https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-45027
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45027
History
Created Old Value New Value Data Type Notes
2023-01-01 09:14:27 Added to TrackCVE
2023-01-02 17:14:54 2023-01-02T16:16:53 CVE Modified Date updated
2023-01-02 17:14:54 Received Awaiting Analysis Vulnerability Status updated
2023-01-06 11:19:50 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-09 17:16:52 2023-01-09T16:19:12 CVE Modified Date updated
2023-01-09 17:16:52 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-09 17:16:52 Weakness Enumeration new
2023-01-09 17:16:55 CPE Information updated
2023-02-02 00:19:27 2023-02-02T00:15:08 CVE Modified Date updated
2023-02-02 00:19:27 Analyzed Modified Vulnerability Status updated
2023-02-02 00:19:27 References updated
2023-02-02 13:14:15 Modified Undergoing Analysis Vulnerability Status updated
2023-02-16 21:14:13 2023-02-16T19:18:04 CVE Modified Date updated
2023-02-16 21:14:13 Undergoing Analysis Analyzed Vulnerability Status updated
2023-02-16 21:14:13 Weakness Enumeration update