PatchTheCVEcnmaestro vulnerabilities and fixes
Recent CVEs affecting cnmaestro, with upgrade or downgrade steps. 7 tracked.
cnmaestro has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-05-17. Highest priority: CVE-2022-1357 (score 59/100).
- CVE-2022-1362 MEDIUM 5.0 MITIGATE The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted pack
- CVE-2022-1361 HIGH 7.4 MITIGATE The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralizatio
- CVE-2022-1360 HIGH 8.2 MITIGATE The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server
- CVE-2022-1359 MEDIUM 5.7 MITIGATE The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pa
- CVE-2022-1358 MEDIUM 5.9 MITIGATE The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements
- CVE-2022-1357 CRITICAL 9.8 MITIGATE The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execut
- CVE-2022-1356 HIGH 7.1 MITIGATE cnMaestro is vulnerable to a local privilege escalation
FAQ
How do I fix cnmaestro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cnmaestro being exploited right now?
None of the tracked cnmaestro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cnmaestro CVE should I patch first?
CVE-2022-1357 currently ranks highest (59/100): The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execut.