CVE Vulnerability

CVE-2022-36110

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions via the API. This problem has been patched in v0.15.1.

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/gravitl/netmaker/security/advisories/GHSA-ggf6-638m-vqmg Third Party Advisory
https://github.com/gravitl/netmaker/releases/tag/v0.15.1 Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:gravitl:netmaker:*:*:*:*:*:*:*:*
Information

Published : 2022-09-09 08:15

Updated : 2022-09-15 03:31

NVD link : CVE-2022-36110

Mitre link : CVE-2022-36110

Products Affected
No products.
CWE
CWE-863