CVEvulnerability
CVE-2022-45956
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-863
Description
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.
Affected configurations
• boa boa 0.94.13
• boa boa 0.94.14
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://packetstormsecurity.com/files/169962/Boa-Web-Server-0.94.13-0.94.14-Authentication-Bypass.html Exploit, Third Party Advisory, VDB Entry
- https://packetstormsecurity.com/files/169962/Boa-Web-Server-0.94.13-0.94.14-Authentication-Bypass.html Exploit, Third Party Advisory, VDB Entry