Vulnerabilities > CVE-2022-45956 - Incorrect Authorization vulnerability in BOA 0.94.13/0.94.14

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
boa
CWE-863
NVD
Published: 2022-12-12
Updated: 2022-12-15

Summary

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

Vulnerable Configurations

Part Description Count
Application
Boa
2

Common Weakness Enumeration (CWE)

References