VULNERABILITY INTELLIGENCE

CVE-2022-45956

CVSS score5.3 MEDIUM

EPSS probability0.85%

CISA KEVNot currently listed

Published2022-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

Weakness classification

nvd@nist.gov: CWE-863
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry