CVE-2022-45193

EUVD-2022-48101
CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
mitreCNA
5.9 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AC:L/AV:L/A:N/C:N/I:H/PR:L/S:C/UI:R
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
bruhn-newtechcbrn-analysis
𝑥
< 22
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://zigrin.com/advisories/cbrn-analysis-unprotected-storage-of-application-files/
https://zigrin.com/advisories/cbrn-analysis-unprotected-storage-of-application-files/