CVE-2022-39058 — Changing Information Technology Inc. RAVA certificate validation system - Path Traversal

CVE-2022-39058

Changing Information Technology Inc. RAVA certificate validation system - Path Traversal PUBLISHED

Description (CNA)

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.

Affected (CNA)

Vendor / product	Versions
Changing Information Technology Inc. / RAVA certificate validation system	affected 3

CWE

CWE-22

References

https://www.twcert.org.tw/tw/cp-132-6619-9b5a7-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6619-9b5a7-1.html

CISA-ADP

No English description supplied.

No references supplied.