CVE-2022-27563 - Vulnerability Details - OpenCVE

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0098.

Key SSVC decision points have not yet been added.

Vendors	Products
Hcltech	Versionvault Express

Configuration 1 [-]

OR	cpe:2.3:a:hcltech:versionvault_express:2.0.1:::::::*
	cpe:2.3:a:hcltech:versionvault_express:2.1.0:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2022-32064	An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274

History

No history.

MITRE

Status: PUBLISHED

Assigner: HCL

Published: 2022-08-30T21:25:12.351144Z

Updated: 2024-09-16T16:48:58.039Z

Reserved: 2022-03-21T00:00:00

Link: CVE-2022-27563

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-30T22:15:08.980

Modified: 2024-11-21T06:55:57.627

Link: CVE-2022-27563

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "HCL VersionVault Express", "vendor": "HCL Software", "versions": [{"status": "affected", "version": "2.0.1, 2.1.0"}]}], "datePublic": "2022-08-26T00:00:00", "descriptions": [{"lang": "en", "value": "An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-08-30T21:25:12", "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274"}], "source": {"discovery": "UNKNOWN"}, "title": "Overload/denial of service affects HCL VersionVault Express", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@hcl.com", "DATE_PUBLIC": "2022-08-26T14:40:00.000Z", "ID": "CVE-2022-27563", "STATE": "PUBLIC", "TITLE": "Overload/denial of service affects HCL VersionVault Express"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HCL VersionVault Express", "version": {"version_data": [{"version_value": "2.0.1, 2.1.0"}]}}]}, "vendor_name": "HCL Software"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-754 Improper Check for Unusual or Exceptional Conditions"}]}]}, "references": {"reference_data": [{"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274", "refsource": "MISC", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T05:32:59.628Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274"}]}]}, "cveMetadata": {"assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "assignerShortName": "HCL", "cveId": "CVE-2022-27563", "datePublished": "2022-08-30T21:25:12.351144Z", "dateReserved": "2022-03-21T00:00:00", "dateUpdated": "2024-09-16T16:48:58.039Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:versionvault_express:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "18552D0F-52C3-4108-906C-5E64517A842B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:versionvault_express:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F34AAA7F-428F-4539-93CF-3A90E688CAB9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service."}, {"lang": "es", "value": "Un usuario no autenticado puede sobrecargar una parte de HCL VersionVault Express y causar una denegaci\u00f3n de servicio"}], "id": "CVE-2022-27563", "lastModified": "2024-11-21T06:55:57.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@hcl.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-08-30T22:15:08.980", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100274"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "psirt@hcl.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-754"}], "source": "nvd@nist.gov", "type": "Primary"}]}