Improper input validation in Oracle Outside In Technology - CVE-2022-48579
Published: April 17, 2024
Vulnerability identifier: #VU88639
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-48579
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local non-authenticated attacker to gain access to sensitive information.
The vulnerability exists due to improper input validation within the Outside In Core (unrar) component in Oracle Outside In Technology. A local non-authenticated attacker can exploit this vulnerability to gain access to sensitive information.
Affected software
Oracle Outside In Technology
Ubuntu
libunrar5 (Ubuntu package)
unrar (Ubuntu package)
Ubuntu
libunrar5 (Ubuntu package)
unrar (Ubuntu package)
How to mitigate CVE-2022-48579
Install updates from vendor's website.
libunrar5 (Ubuntu package) - addressed in versions 1:5.6.6-2ubuntu0.1, 1:6.1.5-1ubuntu0.1
unrar (Ubuntu package) - addressed in versions 1:5.6.6-2ubuntu0.1, 1:6.1.5-1ubuntu0.1
unrar (Ubuntu package) - addressed in versions 1:5.6.6-2ubuntu0.1, 1:6.1.5-1ubuntu0.1