Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-39289

Good to know:

icon

Date: October 7, 2022

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging.

Language: PHP

Severity Score

Related Resources (5)

https://github.com/ZoneMinder/zoneminder/commit/34ffd92bf123070cab6c83ad4cfe6297dd0ed0b4
https://security-tracker.debian.org/tracker/CVE-2022-39289
https://nvd.nist.gov/vuln/detail/CVE-2022-39289
https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-mpcx-3gvh-9488
https://www.mend.io/vulnerability-database/CVE-2022-39289

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

Information Leak / Disclosure

CWE-200

Missing Authorization

CWE-862

Top Fix

icon

Upgrade Version

Upgrade to version 1.36.27

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us