Open Endpoints Vulnerability in Cerebrate by Cerebrate Project
CVE-2022-25319

5.3MEDIUM

Key Information:

Status
Vendor
CVE Published:
18 February 2022

What is CVE-2022-25319?

A vulnerability has been identified in the Cerebrate application, allowing unauthorized access to endpoints that remain open even when they are not explicitly enabled. This situation can lead to unintended exposure of application functionalities and data, creating potential security risks. Users of Cerebrate, especially those using version 1.4, are advised to review their configurations and apply necessary mitigations to safeguard their applications from possible exploitation.

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.