Velociraptor Client ID Spoofing
CVE-2022-35629

5.4MEDIUM

Key Information:

Vendor: Rapid7
Status: Velociraptor
Vendor: CVE Published:; 29 July 2022

What is CVE-2022-35629?

Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to the server claiming to come from another client ID. This issue was resolved in Velociraptor 0.6.5-2.

Affected Version(s)

Velociraptor 0.6.5-2

References

https://www.rapid7.com/blog/post/2022/07/26/cve-2022-3562...

x_refsource_CONFIRM

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 29, 2022
Vulnerability Reserved
Jul 11, 2022

Credit

Issue identified and disclosed by Tim Goddard of CyberCX during a security code review