8.1

CVE-2022-36174

Exploit
FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freshworks ≫ Freshservice Agent SwPlatformwindows Version < 2.11.0
Freshworks ≫ Freshservice Agent SwPlatformlinux Version < 3.3.0
Freshworks ≫ Freshservice Agent SwPlatformmacos Version < 4.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.35
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-354 Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

https://community.freshworks.com/product-updates/freshservice-release-notes-april-2022-23982#Security+updates:+Discovery+Probe+and+Discovery+Agent
Vendor Advisory
Release Notes
https://public-exposure.inform.social/post/integrity-checking/
Third Party Advisory
Exploit