Security features bypass in Doktor - CVE-2022-25204
Published: February 17, 2022
Vulnerability identifier: #VU60688
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-25204
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the affected plugin implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc. A remote user can determine whether a file with a given name exists.
Affected software
Doktor
How to mitigate CVE-2022-25204
Install updates from vendor's website.