CVE-2022-2822 LOW

CVE-2022-2822: Authentication Bypass by Primary Weakness in octoprint/octoprint

Vendor Octoprint

Product octoprint/octoprint

Weakness CWE-307 · Brute force

Published August 15, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

3.7/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.

Key dates

02Disclosure timeline

August 15, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2822 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/307.html