Security Advisory

CVE-2022-39055

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-18 05:40:19
Last updated 2025-05-09 14:51:35
Assigner twcert
State PUBLISHED

Description

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.