{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000078.html",
  "dc:date": "2024-05-30T17:57+09:00",
  "dcterms:issued": "2022-10-11T17:49+09:00",
  "dcterms:modified": "2024-05-30T17:57+09:00",
  "description": "bingo!CMS provided by Shift Tech Inc. contains an authentication bypass vulnerability (CWE-288) in some of the management functions.\r\nShift Tech Inc. states that attacks exploiting this vulnerability have been observed.\r\n\r\nShift Tech Inc. reported this vulnerability to IPA to notify users of its solution through JVN.\r\nJPCERT/CC and Shift Tech Inc. coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000078.html",
  "sec:cpe": {
    "#text": "cpe:/a:shift-tech:bingo%21cms",
    "@product": "bingo!CMS",
    "@vendor": "Shift Tech Inc.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "7.5",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000078",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN74592196/index.html",
      "@id": "JVN#74592196",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-42458",
      "@id": "CVE-2022-42458",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-42458",
      "@id": "CVE-2022-42458",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/security/ciadr/vul/20221011-jvn.html",
      "@id": "Security Updates Available for bingo!CMS (JVN#74592196)",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "https://www.jpcert.or.jp/english/at/2022/at220026.html",
      "@id": "JPCERT-AT-2022-0026",
      "@source": "JPCERT"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "bingo!CMS vulnerable to authentication bypass"
}