CVE-2022-36302CWE-641

File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources…

High · published August 1, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.2th percentile
Weakness
CWE-641 · Improper Restriction of Names for Files and Other Resources
Published
2022-08-01T14:03Z
EPSS history
Timeline
  • 01 AUG 14:03Z
    File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources…
    cvelistv5