CVE-2022-3693 - OpenCVE

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Fileorbis	Fileorbis

Configuration 1 [-]

cpe:2.3:a:fileorbis:fileorbis:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.usom.gov.tr/bildirim/tr-23-0021

History

No history.

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2023-01-13T00:00:00

Updated: 2024-08-03T01:14:03.335Z

Reserved: 2022-10-26T00:00:00

Link: CVE-2022-3693

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-01-13T08:15:07.787

Modified: 2023-04-16T09:15:07.147

Link: CVE-2022-3693

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-3693", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "assignerShortName": "TR-CERT", "dateUpdated": "2024-08-03T01:14:03.335Z", "dateReserved": "2022-10-26T00:00:00", "datePublished": "2023-01-13T00:00:00"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "FileOrbis File Management System", "vendor": "Deytek Informatics", "versions": [{"lessThan": "10.6.3", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Tevfik DEMIREL"}], "datePublic": "2023-01-12T21:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.<p>This issue affects FileOrbis File Management System: from unspecified before 10.6.3.</p>"}], "value": "Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.\n\n"}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-35", "description": "CWE-35 Path Traversal: '.../...//'", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2023-09-03T15:43:15.941Z"}, "references": [{"tags": ["government-resource"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0021"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>FileOrbis File Management System module should be updated to the 10.6.3 version provided by the vendor. </p>"}], "value": "FileOrbis File Management System module should be updated to the 10.6.3 version provided by the vendor. \n\n"}], "source": {"advisory": "TR-23-0021", "defect": ["TR-23-0021"], "discovery": "EXTERNAL"}, "title": "Path traversal in FileOrbis File Management System", "x_generator": {"engine": "Vulnogram 0.0.9"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:14:03.335Z"}, "title": "CVE Program Container", "references": [{"tags": ["government-resource", "x_transferred"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0021"}]}]}}