cvelistv5 - CVE-2022-31289

CVE-2022-31289 (GCVE-0-2022-31289)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2022-06-24T14:41:30",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-31289",
    "datePublished": "2022-06-14T16:44:59",
    "dateRejected": "2022-06-24T14:41:30",
    "dateReserved": "2022-05-23T00:00:00",
    "dateUpdated": "2022-06-24T14:41:30",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-31289\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-06-14T17:15:08.333\",\"lastModified\":\"2023-11-07T03:47:36.793\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none\"}],\"metrics\":{},\"references\":[]}}"
  }
}

fkie_cve-2022-31289

Vulnerability from fkie_nvd

Published

2022-06-14 17:15

Modified

2023-11-07 03:47

Severity ?

Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
    }
  ],
  "id": "CVE-2022-31289",
  "lastModified": "2023-11-07T03:47:36.793",
  "metrics": {},
  "published": "2022-06-14T17:15:08.333",
  "references": [],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Rejected"
}

ghsa-rr3j-p3x2-j7gg

Vulnerability from github

Published

2022-06-15 00:00

Modified

2022-06-24 00:00

Details

https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. ¶¶ 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-31289"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-06-14T17:15:00Z",
    "severity": null
  },
  "details": "https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. \u00b6\u00b6 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.",
  "id": "GHSA-rr3j-p3x2-j7gg",
  "modified": "2022-06-24T00:00:32Z",
  "published": "2022-06-15T00:00:22Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31289"
    },
    {
      "type": "WEB",
      "url": "https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb"
    },
    {
      "type": "WEB",
      "url": "https://www.acunetix.com/vulnerabilities/web/tag/authentication-bypass"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

gsd-2022-31289

Vulnerability from gsd

Modified

2023-12-13 01:19

Details

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Aliases

CVE-2022-31289

Aliases

CVE-2022-31289

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-31289",
    "description": "GSD UPDATE: There doesn\u0027t appear to be a vulnerability, the Sonatype Nexus Repository Manager OSS is a single page web app, so when passed a \"200\" response the page displays that login was successful when it fact it was not. A CVE was erroneously assigned to the original security researchers report. \n\n https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. \u00b6\u00b6 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.",
    "id": "GSD-2022-31289",
    "references": [
      {
        "type": "WEB",
        "url": "https://blog.sonatype.com/nexus-repo-issue-neither-bug-nor-vulnerability"
      },
      {
        "type": "TWITTER",
        "url": "https://twitter.com/brian_fox/status/1537468660377440270"
      }
    ],
    "summary": "GSD UPDATE: There doesn\u0027t appear to be a vulnerability, the Sonatype Nexus Repository Manager OSS is a single page web app, so when passed a \"200\" response the page displays that login was successful when it fact it was not. A CVE was erroneously assigned to the original security researchers report."
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-31289"
      ],
      "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
      "id": "GSD-2022-31289",
      "modified": "2023-12-13T01:19:17.728055Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2022-31289",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": []
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-31289"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "** DISPUTED ** https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access. NOTE: third parties claim that the server application has not actually authenticated the request and no administrative actions are permitted which would not make this issue a vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": []
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb",
              "refsource": "MISC",
              "tags": [],
              "url": "https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb"
            },
            {
              "name": "https://www.acunetix.com/vulnerabilities/web/tag/authentication-bypass/",
              "refsource": "MISC",
              "tags": [],
              "url": "https://www.acunetix.com/vulnerabilities/web/tag/authentication-bypass/"
            }
          ]
        }
      },
      "impact": {},
      "lastModifiedDate": "2022-06-23T17:15Z",
      "publishedDate": "2022-06-14T17:15Z"
    }
  }
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2022-31289 (GCVE-0-2022-31289)

Vulnerability from cvelistv5

fkie_cve-2022-31289

Vulnerability from fkie_nvd

ghsa-rr3j-p3x2-j7gg

Vulnerability from github

gsd-2022-31289

Vulnerability from gsd

Tags

Sightings

Nomenclature