Vulnerabilities > CVE-2022-34558

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

global-workqueue-project

reqmon-project

reqmgr2-project

wmagent-project

critical

NVD

Published: 2022-07-28

Updated: 2024-11-21

Summary

WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.

Vulnerable Configurations

Part	Description	Count
Application	Global-Workqueue_Project Global Workqueue Project Global Workqueue 1.4.1	1
Application	Reqmon_Project Reqmon Project Reqmon 1.4.1	1
Application	Reqmgr2_Project Reqmgr2 Project Reqmgr2 1.4.0 Reqmgr2 Project Reqmgr2 1.4.1	2
Application	Wmagent_Project Wmagent Project Wmagent 1.3.3	2

References

https://github.com/dmwm/WMCore/issues/11188
https://github.com/dmwm/WMCore/issues/11188

Vulnerabilities > CVE-2022-34558 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-34558"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-34558