CVE-2022-2822
- Source
- https://cve.org/CVERecord?id=CVE-2022-2822
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2822.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-2822
- Aliases
- Published
- 2022-08-15T10:30:17Z
- Modified
- 2026-10-28T02:30:38Z
- Severity
-
- 3.7 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- Authentication Bypass by Primary Weakness in octoprint/octoprint
- Details
-
An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.
- Database specific
{ "cna_assigner": "@huntrdev", "cwe_ids": [ "CWE-307" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2822.json" }- References
Affected packages
Git / github.com/octoprint/octoprint
Affected ranges
- Type
- GIT
- Repo
- https://github.com/octoprint/octoprint
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:octoprint:octoprint:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "1.9.0" } ], "source": "CPE_RANGE" }, { "range": [ { "fixed": "82c892ba40b3741d1b7711d949e56af64f5bc2de" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
1.*
1.1.0-dev
1.2.0
1.2.0-dev
1.2.0-rc1
1.2.0-rc2
1.2.0-rc3
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
1.2.14
1.2.15
1.2.16
1.2.16rc1
1.2.16rc2
1.2.17rc1
1.2.17rc2
1.2.17rc3
1.2.18
1.2.18rc1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.4.0rc1
1.4.0rc2
1.4.0rc3
1.4.0rc4
1.4.0rc5
1.4.0rc6
1.5.0
1.5.0rc1
1.5.0rc2
1.5.0rc3
1.5.1
1.5.2
1.5.3
1.6.0rc1
1.6.1
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.8.0
1.8.0rc1
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7