GHSA-mw9h-hcp7-fgc6

Source

https://github.com/advisories/GHSA-mw9h-hcp7-fgc6

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-mw9h-hcp7-fgc6/GHSA-mw9h-hcp7-fgc6.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-mw9h-hcp7-fgc6

Aliases

CVE-2022-33916

Published

2022-08-24T00:00:32Z

Modified

2023-11-08T04:09:40.944298Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server

Details

OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.

Database specific

{
    "github_reviewed_at": "2022-08-29T18:41:29Z",
    "nvd_published_at": "2022-08-23T01:15:00Z",
    "cwe_ids": [
        "CWE-200"
    ],
    "severity": "MODERATE",
    "github_reviewed": true
}

References

Affected packages

NuGet / OPCFoundation.NetStandard.Opc.Ua.Server

Package

Name: OPCFoundation.NetStandard.Opc.Ua.Server; View open source insights on deps.dev
Purl: pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.370.9

Affected versions

1.*

1.4.363.104-preview

1.4.363.107

1.4.364.40

1.4.365-gfc341ee8c5

1.4.365.1-preview

1.4.365.2

1.4.365.10

1.4.365.23

1.4.365.48

1.4.366.31-preview

1.4.366.38

1.4.367.39

1.4.367.41

1.4.367.42

1.4.367.64-preview

1.4.367.75

1.4.367.95

1.4.367.100

1.4.368.27-preview

1.4.368.33

1.4.368.52-preview

1.4.368.53

1.4.368.58

1.4.369.30

1.4.370.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-mw9h-hcp7-fgc6/GHSA-mw9h-hcp7-fgc6.json"