CVE-2022-3979

Source
https://cve.org/CVERecord?id=CVE-2022-3979
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3979.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3979
Downstream
Published
2022-11-13T00:00:00Z
Modified
2026-10-22T10:33:27Z
Severity
  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
NagVis CoreLogonMultisite.php checkAuthCookie type conversion
Details

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.9.34 is able to address this issue. The identifier of the patch is 7574fd8a2903282c2e0d1feef5c4876763db21d5. It is recommended to upgrade the affected component. The identifier VDB-213557 was assigned to this vulnerability.

Database specific
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-704"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3979.json"
}
References

Affected packages

Git / github.com/nagvis/nagvis

Affected ranges

Type
GIT
Repo
https://github.com/nagvis/nagvis
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.9.0"
                },
                {
                    "last_affected": "1.9.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.1"
                },
                {
                    "last_affected": "1.9.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.2"
                },
                {
                    "last_affected": "1.9.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.3"
                },
                {
                    "last_affected": "1.9.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.4"
                },
                {
                    "last_affected": "1.9.4"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.5"
                },
                {
                    "last_affected": "1.9.5"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.6"
                },
                {
                    "last_affected": "1.9.6"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.7"
                },
                {
                    "last_affected": "1.9.7"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.8"
                },
                {
                    "last_affected": "1.9.8"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.9"
                },
                {
                    "last_affected": "1.9.9"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.10"
                },
                {
                    "last_affected": "1.9.10"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.11"
                },
                {
                    "last_affected": "1.9.11"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.12"
                },
                {
                    "last_affected": "1.9.12"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.13"
                },
                {
                    "last_affected": "1.9.13"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.14"
                },
                {
                    "last_affected": "1.9.14"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.15"
                },
                {
                    "last_affected": "1.9.15"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.16"
                },
                {
                    "last_affected": "1.9.16"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.17"
                },
                {
                    "last_affected": "1.9.17"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.18"
                },
                {
                    "last_affected": "1.9.18"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.19"
                },
                {
                    "last_affected": "1.9.19"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.20"
                },
                {
                    "last_affected": "1.9.20"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.21"
                },
                {
                    "last_affected": "1.9.21"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.22"
                },
                {
                    "last_affected": "1.9.22"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.23"
                },
                {
                    "last_affected": "1.9.23"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.24"
                },
                {
                    "last_affected": "1.9.24"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.25"
                },
                {
                    "last_affected": "1.9.25"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.26"
                },
                {
                    "last_affected": "1.9.26"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.27"
                },
                {
                    "last_affected": "1.9.27"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.28"
                },
                {
                    "last_affected": "1.9.28"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.29"
                },
                {
                    "last_affected": "1.9.29"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.30"
                },
                {
                    "last_affected": "1.9.30"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.31"
                },
                {
                    "last_affected": "1.9.31"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.32"
                },
                {
                    "last_affected": "1.9.32"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.9.33"
                },
                {
                    "last_affected": "1.9.33"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "7574fd8a2903282c2e0d1feef5c4876763db21d5"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "nagvis-1.9.34",
            "range": [
                {
                    "fixed": "719f7d8454d0d7f31bef9938bd8b2eb2e7107063"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

1.*
1.9.0
1.9.1
1.9.10
1.9.11
1.9.12
1.9.13
1.9.14
1.9.15
1.9.16
1.9.17
1.9.18
1.9.19
1.9.2
1.9.20
1.9.21
1.9.22
1.9.23
1.9.24
1.9.25
1.9.26
1.9.27
1.9.28
1.9.29
1.9.3
1.9.30
1.9.31
1.9.32
1.9.33
1.9.4
1.9.5
1.9.6
1.9.7
1.9.8
1.9.9
nagvis-1.*
nagvis-1.9.0
nagvis-1.9.1
nagvis-1.9.10
nagvis-1.9.11
nagvis-1.9.12
nagvis-1.9.13
nagvis-1.9.14
nagvis-1.9.15
nagvis-1.9.16
nagvis-1.9.17
nagvis-1.9.18
nagvis-1.9.19
nagvis-1.9.2
nagvis-1.9.20
nagvis-1.9.21
nagvis-1.9.22
nagvis-1.9.23
nagvis-1.9.24
nagvis-1.9.25
nagvis-1.9.26
nagvis-1.9.27
nagvis-1.9.28
nagvis-1.9.29
nagvis-1.9.3
nagvis-1.9.30
nagvis-1.9.31
nagvis-1.9.32
nagvis-1.9.33
nagvis-1.9.4
nagvis-1.9.5
nagvis-1.9.6
nagvis-1.9.7
nagvis-1.9.8
nagvis-1.9.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3979.json"