CVE-2022-24396CWE-306

The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via…

published March 8, 2022

CVSS
—
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-03-08T13:35Z
EPSS history
Timeline
  • 08 MAR 13:35Z
    The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via…
    cvelistv5