Vulnerabilities > CVE-2022-21704

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

log4js-project

debian

NVD

Published: 2022-01-19

Updated: 2024-11-21

Summary

log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. This would affect any users that have not supplied their own permissions for the files via the mode parameter in the config. Users are advised to update.

Vulnerable Configurations

Part	Description	Count
Application	Log4Js_Project Log4Js Project Log4Js 0.5.0 Log4Js Project Log4Js 0.5.1 Log4Js Project Log4Js 0.5.2 Log4Js Project Log4Js 0.5.3 Log4Js Project Log4Js 0.5.4 Log4Js Project Log4Js 0.5.5 Log4Js Project Log4Js 0.5.6 Log4Js Project Log4Js 0.5.7 Log4Js Project Log4Js 0.6.0 Log4Js Project Log4Js 0.6.2 Log4Js Project Log4Js 0.6.3 Log4Js Project Log4Js 0.6.4 Log4Js Project Log4Js 0.6.5 Log4Js Project Log4Js 0.6.6 Log4Js Project Log4Js 0.6.7 Log4Js Project Log4Js 0.6.8 Log4Js Project Log4Js 0.6.9 Log4Js Project Log4Js 0.6.10 Log4Js Project Log4Js 0.6.11 Log4Js Project Log4Js 0.6.12 Log4Js Project Log4Js 0.6.13 Log4Js Project Log4Js 0.6.14 Log4Js Project Log4Js 0.6.15 Log4Js Project Log4Js 0.6.16 Log4Js Project Log4Js 0.6.17 Log4Js Project Log4Js 0.6.18 Log4Js Project Log4Js 0.6.19 Log4Js Project Log4Js 0.6.20 Log4Js Project Log4Js 0.6.21 Log4Js Project Log4Js 0.6.22 Log4Js Project Log4Js 0.6.23 Log4Js Project Log4Js 0.6.24 Log4Js Project Log4Js 0.6.25 Log4Js Project Log4Js 0.6.26 Log4Js Project Log4Js 0.6.27 Log4Js Project Log4Js 0.6.28 Log4Js Project Log4Js 0.6.29 Log4Js Project Log4Js 0.6.30 Log4Js Project Log4Js 0.6.31 Log4Js Project Log4Js 0.6.32 Log4Js Project Log4Js 0.6.33 Log4Js Project Log4Js 0.6.34 Log4Js Project Log4Js 0.6.35 Log4Js Project Log4Js 0.6.36 Log4Js Project Log4Js 0.6.37 Log4Js Project Log4Js 0.6.38 Log4Js Project Log4Js 1.0.1 Log4Js Project Log4Js 1.1.0 Log4Js Project Log4Js 1.1.1 Log4Js Project Log4Js 2.0.0 Log4Js Project Log4Js 2.0.1 Log4Js Project Log4Js 2.1.0 Log4Js Project Log4Js 2.2.0 Log4Js Project Log4Js 2.3.0 Log4Js Project Log4Js 2.3.1 Log4Js Project Log4Js 2.3.2 Log4Js Project Log4Js 2.3.3 Log4Js Project Log4Js 2.3.4 Log4Js Project Log4Js 2.3.5 Log4Js Project Log4Js 2.3.6 Log4Js Project Log4Js 2.3.7 Log4Js Project Log4Js 2.3.8 Log4Js Project Log4Js 2.3.9 Log4Js Project Log4Js 2.3.10 Log4Js Project Log4Js 2.3.11 Log4Js Project Log4Js 2.3.12 Log4Js Project Log4Js 2.4.0 Log4Js Project Log4Js 2.4.1 Log4Js Project Log4Js 2.5.0 Log4Js Project Log4Js 2.5.1 Log4Js Project Log4Js 2.5.2 Log4Js Project Log4Js 2.5.3 Log4Js Project Log4Js 2.6.0 Log4Js Project Log4Js 2.6.1 Log4Js Project Log4Js 2.7.0 Log4Js Project Log4Js 2.8.0 Log4Js Project Log4Js 2.9.0 Log4Js Project Log4Js 2.10.0 Log4Js Project Log4Js 2.11.0 Log4Js Project Log4Js 3.0.0 Log4Js Project Log4Js 3.0.1 Log4Js Project Log4Js 3.0.2 Log4Js Project Log4Js 3.0.3 Log4Js Project Log4Js 3.0.4 Log4Js Project Log4Js 3.0.5 Log4Js Project Log4Js 3.0.6 Log4Js Project Log4Js 4.0.0 Log4Js Project Log4Js 4.0.1 Log4Js Project Log4Js 4.0.2 Log4Js Project Log4Js 4.1.0 Log4Js Project Log4Js 4.1.1 Log4Js Project Log4Js 4.2.0 Log4Js Project Log4Js 4.3.0 Log4Js Project Log4Js 4.3.1 Log4Js Project Log4Js 4.3.2 Log4Js Project Log4Js 4.4.0 Log4Js Project Log4Js 4.5.0 Log4Js Project Log4Js 4.5.1 Log4Js Project Log4Js 5.0.0 Log4Js Project Log4Js 5.1.0 Log4Js Project Log4Js 5.2.0 Log4Js Project Log4Js 5.2.1 Log4Js Project Log4Js 5.2.2 Log4Js Project Log4Js 5.3.0 Log4Js Project Log4Js 6.0.0 Log4Js Project Log4Js 6.1.0 Log4Js Project Log4Js 6.1.1 Log4Js Project Log4Js 6.1.2 Log4Js Project Log4Js 6.2.0 Log4Js Project Log4Js 6.2.1 Log4Js Project Log4Js 6.3.0	111
OS	Debian Debian Debian Linux 10.0	1

Vulnerabilities > CVE-2022-21704 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-21704"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-21704