CVE-2022-22821

Description

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

CVSS Version 3.1

nvd

CVE ID: CVE-2022-22821
Base Score: 4.4
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 0.8

mitre

CVE ID: CVE-2022-22821
Base Score: 2.0
Base Severity: LOW
Vector String:CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Impact Score: 1.4
Exploitability Score: 0.6

CVSS Version 2.0

nvd

CVE ID: CVE-2022-22821
Base Score: 2.1
Base Severity: LOW
Vector String:AV:L/AC:L/Au:N/C:N/I:P/A:N

Refrence: NVDMITRE