CVE-2022-27930: Medium severity pexip infinity vulnerability
Published Jul 17, 2022
·Updated
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed.
Affected Software
1 affected component
Pexip Pexip Infinity>=27.0<27.3
Event History
Jul 17, 2022
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
Description
Frequently Asked Questions
1
What is CVE-2022-27930?
CVE-2022-27930 is a vulnerability in Pexip Infinity versions 27.x before 27.3 that allows remote attackers to trigger a software abort through single-sign-on by guessing a random Universally Unique Identifier (UUID).
2
How does CVE-2022-27930 affect Pexip Infinity?
CVE-2022-27930 affects Pexip Infinity versions 27.x before 27.3.
3
What is the severity of CVE-2022-27930?
The severity of CVE-2022-27930 is medium.
4
How can CVE-2022-27930 be exploited?
CVE-2022-27930 can be exploited by remote attackers through the single-sign-on feature if they are able to guess a random Universally Unique Identifier (UUID).
5
Is there a fix available for CVE-2022-27930?
Yes, a fix is available for CVE-2022-27930 in Pexip Infinity version 27.3.