CVE-2022-42136

Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://pastebin.com/ahLNMf5n	Third Party Advisory
https://www.mailenable.com/kb/content/article.asp?ID=ME020737	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise:::*
	cpe:2.3:a:mailenable:mailenable:::::enterprise_premium:::*
	cpe:2.3:a:mailenable:mailenable:::::professional:::*
	cpe:2.3:a:mailenable:mailenable:::::standard:::*

History

No history.

Information

Published : 2023-01-13 21:15

Updated : 2023-01-23 18:27

NVD link : CVE-2022-42136

Mitre link : CVE-2022-42136

CVE.ORG link : CVE-2022-42136

JSON object : View

Products Affected

mailenable

mailenable

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2022-42136", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-01-13T21:15:15.523", "references": [{"url": "https://pastebin.com/ahLNMf5n", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.mailenable.com/kb/content/article.asp?ID=ME020737", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands."}], "lastModified": "2023-01-23T18:27:50.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "0BD1DC6B-569B-4A68-A940-8DD7D46B0EC7", "versionEndExcluding": "8.66"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "vulnerable": true, "matchCriteriaId": "F00FBB02-0396-48FD-A212-B8AA0EED5EB1", "versionEndExcluding": "8.66"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "04012D59-A1A5-4E0D-9D09-B916DF4109C7", "versionEndExcluding": "8.66"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "vulnerable": true, "matchCriteriaId": "236A06C3-A366-46E8-AA7A-6BB0076B747F", "versionEndExcluding": "8.66"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "FB5FA14B-9800-4944-914B-6F5EC3AFE2D3", "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "vulnerable": true, "matchCriteriaId": "4335FB0F-3311-4DB4-82F7-A1951FD2972C", "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "12E681AC-2B1C-4848-A7F3-D32412F971E5", "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "vulnerable": true, "matchCriteriaId": "9DAB75C2-9F57-4E54-80EC-B69147E619D1", "versionEndExcluding": "9.85", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "7BF6CDCE-2212-49CF-ADA1-F066D126B970", "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise_premium:*:*:*", "vulnerable": true, "matchCriteriaId": "DD783D53-EEA4-4DBC-B105-E224E4AE978B", "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "DE07E64E-C8C4-40D7-AF5D-54C684CF29C8", "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}, {"criteria": "cpe:2.3:a:mailenable:mailenable:*:*:*:*:standard:*:*:*", "vulnerable": true, "matchCriteriaId": "D2D9F41A-E2A3-495C-90A7-F56104291EDA", "versionEndExcluding": "10.42", "versionStartIncluding": "10.00"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}