Vulnerabilities

TI-2022-18450 CVE-2022-39058 · GHSA-j8m8-g7pf-5jxh

Changing Information Technology Inc. RAVA certificate validation system - Path Traversal

MEDIUM 43

RAVA certification validation system has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02157 Published 2022-10-18 No fix listed CWE-22

TI-2022-18449 CVE-2022-39057 · GHSA-cp7v-6jp7-gpwm

LOW 35

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00866 Published 2022-10-18 No fix listed CWE-78

TI-2022-18448 CVE-2022-39056 · GHSA-v8x9-hfxx-9g25

MEDIUM 51

RAVA certificate validation system has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0096 Published 2022-10-18 No fix listed CWE-89

TI-2022-18447 CVE-2022-39055 · GHSA-p69p-2m86-g334

LOW 31

RAVA certificate validation system has inadequate filtering for URL parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00526 Published 2022-10-18 No fix listed CWE-918