CVE-2022-42136

Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands.

CVSS v3.0 8.8 HIGH

8.8^/10

CVSS v3.0 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.mailenable.com/kb/content/article.asp?ID=ME020737	Vendor Advisory
https://pastebin.com/ahLNMf5n	Third Party Advisory

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*

Information

Published : 2023-01-13 13:15

Updated : 2023-01-23 10:27

NVD link : CVE-2022-42136

Mitre link : CVE-2022-42136

JSON object : View

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

Products Affected

mailenable

mailenable

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.mailenable.com/kb/content/article.asp?ID=ME020737", "name": "https://www.mailenable.com/kb/content/article.asp?ID=ME020737", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://pastebin.com/ahLNMf5n", "name": "https://pastebin.com/ahLNMf5n", "tags": ["Third Party Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-42136", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}}, "publishedDate": "2023-01-13T21:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "8.66"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "8.66"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "8.66"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "8.66"}, {"cpe23Uri": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-01-23T18:27Z"}