CVE-2022-2324 Vulnerability Details

  /     /     /  

CVE-2022-2324 Metadata Quick Info

CVE Published: 29/07/2022 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: sonicwall | Vendor: SonicWall | Product: SonicWall Email Security
Status : PUBLISHED

---

CVE-2022-2324 Description

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-358
CWE Name: CWE-358: Improperly Implemented Security Check for Standard
Source: SonicWall

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).