CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 86.89%
Affected Products (NVD)
VendorProductVersion
go-restful_projectgo-restful
𝑥
< 2.16.0
go-restful_projectgo-restful
3.0.0 ≤
𝑥
< 3.8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
golang-github-emicklei-go-restful
bookworm
3.10.2-1
fixed
bullseye
no-dsa
buster
postponed
sid
3.10.2-1
fixed
trixie
3.10.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
golang-github-emicklei-go-restful
bionic
needs-triage
focal
needs-triage
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
aws-iam-authenticator
suse enterprise sap 15 SP2
0.5.3-150000.1.12.1
fixed
suse enterprise sap 15 SP3
0.5.3-150000.1.12.1
fixed
suse enterprise sap 15 SP4
0.7.18-150000.1.17.1
fixed
suse enterprise sap 15 SP5
0.7.18-150000.1.17.1
fixed
suse enterprise server 15 SP2
0.5.3-150000.1.12.1
fixed
suse enterprise server 15 SP3
0.5.3-150000.1.12.1
fixed
suse enterprise server 15 SP4
0.7.18-150000.1.17.1
fixed
suse enterprise server 15 SP5
0.7.18-150000.1.17.1
fixed
catatonit
suse enterprise sap 15 SP1
0.2.0-150000.3.6.1
fixed
suse enterprise sap 15 SP2
0.2.0-150000.3.6.1
fixed
suse enterprise server 15 SP1
0.2.0-150000.3.6.1
fixed
suse enterprise server 15 SP2
0.2.0-150000.3.6.1
fixed
containerd
suse enterprise desktop 15 SP7
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP1
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP2
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP3
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP7
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP1
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP2
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP3
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP7
1.7.8-150000.103.1
fixed
containerd-ctr
suse enterprise sap 15 SP1
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP2
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP3
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP7
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP1
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP2
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP3
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP7
1.7.8-150000.103.1
fixed
containerd-devel
suse enterprise sap 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise sap 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise sap 15 SP7
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP4
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP5
1.7.21-150000.117.1
fixed
suse enterprise server 15 SP6
1.7.8-150000.103.1
fixed
suse enterprise server 15 SP7
1.7.8-150000.103.1
fixed
containerized-data-importer-manifests
suse enterprise sap 15 SP3
1.43.2-150300.8.9.3
fixed
suse enterprise sap 15 SP4
1.51.0-150400.4.3.1
fixed
suse enterprise sap 15 SP5
1.55.0-150500.4.4
fixed
suse enterprise sap 15 SP6
1.58.0-150600.1.55
fixed
suse enterprise sap 15 SP7
1.61.0-150600.3.12.1
fixed
suse enterprise server 15 SP3
1.43.2-150300.8.9.3
fixed
suse enterprise server 15 SP4
1.51.0-150400.4.3.1
fixed
suse enterprise server 15 SP5
1.55.0-150500.4.4
fixed
suse enterprise server 15 SP6
1.58.0-150600.1.55
fixed
suse enterprise server 15 SP7
1.61.0-150600.3.12.1
fixed
helm
suse enterprise desktop 15 SP7
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise sap 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP7
3.17.2-150000.1.44.1
fixed
suse enterprise server 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise server 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP7
3.17.2-150000.1.44.1
fixed
helm-bash-completion
suse enterprise sap 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise sap 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP7
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise server 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP7
3.9.4-150000.1.10.3
fixed
helm-zsh-completion
suse enterprise sap 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise sap 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise sap 15 SP7
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP3
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP4
3.10.3-150000.1.13.1
fixed
suse enterprise server 15 SP5
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP6
3.9.4-150000.1.10.3
fixed
suse enterprise server 15 SP7
3.9.4-150000.1.10.3
fixed
kubevirt-manifests
suse enterprise sap 15 SP3
0.49.0-150300.8.13.1
fixed
suse enterprise sap 15 SP4
0.54.0-150400.3.3.2
fixed
suse enterprise sap 15 SP5
0.58.0-150500.6.3
fixed
suse enterprise sap 15 SP6
1.1.1-150600.3.6
fixed
suse enterprise sap 15 SP7
1.5.0-150700.1.3
fixed
suse enterprise server 15 SP3
0.49.0-150300.8.13.1
fixed
suse enterprise server 15 SP4
0.54.0-150400.3.3.2
fixed
suse enterprise server 15 SP5
0.58.0-150500.6.3
fixed
suse enterprise server 15 SP6
1.1.1-150600.3.6
fixed
suse enterprise server 15 SP7
1.5.0-150700.1.3
fixed
kubevirt-virtctl
suse enterprise sap 15 SP3
0.49.0-150300.8.13.1
fixed
suse enterprise sap 15 SP4
0.54.0-150400.3.3.2
fixed
suse enterprise sap 15 SP5
0.58.0-150500.6.3
fixed
suse enterprise sap 15 SP6
1.1.1-150600.3.6
fixed
suse enterprise sap 15 SP7
1.5.0-150700.1.3
fixed
suse enterprise server 15 SP3
0.49.0-150300.8.13.1
fixed
suse enterprise server 15 SP4
0.54.0-150400.3.3.2
fixed
suse enterprise server 15 SP5
0.58.0-150500.6.3
fixed
suse enterprise server 15 SP6
1.1.1-150600.3.6
fixed
suse enterprise server 15 SP7
1.5.0-150700.1.3
fixed
runc
suse enterprise desktop 15 SP7
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP1
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP2
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP3
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP4
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP5
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP6
1.1.10-150000.55.1
fixed
suse enterprise sap 15 SP7
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP1
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP2
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP3
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP4
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP5
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP6
1.1.10-150000.55.1
fixed
suse enterprise server 15 SP7
1.1.10-150000.55.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
keda
Azure Linux 3.0
0:2.14.0-1.azl3
fixed
sriov-network-device-plugin
Azure Linux 3.0
0:3.7.0-1.azl3
fixed
Common Weakness Enumeration
References
https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/
https://security.netapp.com/advisory/ntap-20220923-0005/
https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/
https://security.netapp.com/advisory/ntap-20220923-0005/