CVE-2022-27930

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-279317.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.CVE-2022-279327.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.CVE-2022-279338.2Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.CVE-2022-279347.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.CVE-2022-279357.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.CVE-2022-279367.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.CVE-2022-279377.5Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.CVE-2022-279385.5stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw CVE-2022-279395.5tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.CVE-2022-27947.5Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.CVE-2022-279407.8tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.CVE-2022-279417.8tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.