CVE-2024-1965CWE-918

Server-Side Request Forgery Vulnerability in Haivision Products

Medium · published February 28, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Server-Side Request Forgery vulnerability in Haivision's Aviwest Manager and Aviwest Steamhub. This vulnerability could allow an attacker to enumerate internal network configuration without the need for credentials. An attacker could compromise an internal server and retrieve requests sent by other users.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-02-28T12:19Z
EPSS history
Timeline
  • 28 FEB 12:19Z
    Server-Side Request Forgery Vulnerability in Haivision Products
    cvelistv5