RAVA certificate validation system vulnerabilities

3 known vulnerabilities in RAVA certificate validation system from CHANGING Information Technology. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  RAVA certificate validation system: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-39058Oct 18, 2022CHANGING Information TechnologyEPSS 2.16%

  RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.

• 7.2 High severity

  RAVA certificate validation system: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-39057Oct 18, 2022CHANGING Information Technology

  RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.

• 9.8 Critical severity

  RAVA certificate validation system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-39056Oct 18, 2022CHANGING Information Technology

  RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.