CVE-2022-42282: Path Traversal
First published: Fri Jan 13 2023(Updated: )
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA BMC | <00.19.07 | |
| NVIDIA DGX A100 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this NVIDIA BMC vulnerability?
The vulnerability ID of this NVIDIA BMC vulnerability is CVE-2022-42282.
What is the title of this NVIDIA BMC vulnerability?
The title of this NVIDIA BMC vulnerability is 'NVIDIA BMC contains a vulnerability in SPX REST API where an authorized attacker can access arbitrary files, which may lead to information disclosure.'
What is the severity of CVE-2022-42282?
The severity of CVE-2022-42282 is medium (5.5).
What is the affected software for CVE-2022-42282?
The affected software for CVE-2022-42282 is NVIDIA BMC up to version 00.19.07.
How can an authorized attacker exploit CVE-2022-42282?
An authorized attacker can exploit CVE-2022-42282 by accessing arbitrary files through the SPX REST API, potentially leading to information disclosure.
- collector/nvd-index
- agent/weakness
- agent/tags
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia bmc
- canonical/nvidia dgx a100