CVE-2022-32457

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb	Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html	Third Party Advisory
https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb	Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:digiwin:business_process_management:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:06

Type	Values Removed	Values Added
References	~~() https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb - Third Party Advisory~~	() https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb - Third Party Advisory
References	~~() https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html - Third Party Advisory~~	() https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html - Third Party Advisory

Information

Published : 2022-07-20 02:15

Updated : 2024-11-21 07:06

NVD link : CVE-2022-32457

Mitre link : CVE-2022-32457

CVE.ORG link : CVE-2022-32457

JSON object : View

Products Affected

digiwin

business_process_management

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2022-32457", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "twcert@cert.org.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-07-20T02:15:07.487", "references": [{"url": "https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb", "tags": ["Third Party Advisory"], "source": "twcert@cert.org.tw"}, {"url": "https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html", "tags": ["Third Party Advisory"], "source": "twcert@cert.org.tw"}, {"url": "https://www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "twcert@cert.org.tw", "description": [{"lang": "en", "value": "CWE-918"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response."}, {"lang": "es", "value": "Digiwin BPM presenta un filtrado inapropiado para el par\u00e1metro URL. Un atacante remoto no autenticado puede llevar a cabo un ataque de tipo SSRF ciego para detectar la topolog\u00eda de la red interna bas\u00e1ndose en la respuesta de error de la URL"}], "lastModified": "2024-11-21T07:06:23.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:digiwin:business_process_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "619DB3E6-07FE-4F18-A00C-8247958923A4", "versionEndExcluding": "5.8.8.1"}], "operator": "OR"}]}], "sourceIdentifier": "twcert@cert.org.tw"}