Vulnerability Description
An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Capsule8 | Capsule8 | >= 4.6.0, < 4.10.0 |
Related Weaknesses (CWE)
References
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-consoleThird Party Advisory
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-consoleThird Party Advisory
FAQ
What is CVE-2022-0366?
CVE-2022-0366 is a vulnerability with a CVSS score of 8.8 (HIGH). An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1.
How severe is CVE-2022-0366?
CVE-2022-0366 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-0366?
Check the references section above for vendor advisories and patch information. Affected products include: Capsule8 Capsule8.