PT-2022-21434 · Unknown · Ikus060/Minarca

Published 2022-09-22 · Updated 2022-09-22 · CVE-2022-3268

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ikus060/minarca versions prior to 4.2.2

Description The issue concerns weak password requirements in the GitHub repository ikus060/minarca.

Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2022-3268

Affected Products

Ikus060/Minarca

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3268.json · Exploit
• 🔥 https://huntr.dev/bounties/00e464ce-53b9-485d-ac62-6467881654c2 · Exploit
• https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a · Patch
• https://osv.dev/vulnerability/CVE-2022-3268 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3268 · Security Note
• https://t.me/cvenotify/36653 · Telegram Post
• https://t.me/cibsecurity/50260 · Telegram Post