CVE-2022-34464

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-552 CWE-668

Affected software

No affected versions have been published.

Timeline

Published: Jul 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-344657.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34 CVE-2022-344666.5A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix CVE-2022-344676.5A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Mod CVE-2022-344688.8An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. This vulnerability affec CVE-2022-344698.1When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificat CVE-2022-34474.3Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the conte CVE-2022-344709.8Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Fi CVE-2022-344716.5When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manif CVE-2022-344724.3If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrec CVE-2022-344736.1The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did no CVE-2022-344746.1Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external CVE-2022-344756.1SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanit