CVE-2022-37109

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root directory served by StaticFileHandler and the Tornado rule to throw a 403 error when password.txt is accessed can be bypassed. Furthermore, it is not necessary to crack the password hash to authenticate with the application because the password hash is also used as the cookie secret, so an attacker can generate his own authentication cookie.
Configurations

Configuration 1 (hide)

cpe:2.3:a:camp_project:camp:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:49

Type Values Removed Values Added
References
  • {'url': 'https://medium.com/@elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904', 'name': 'https://medium.com/@elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://medium.com/%40elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904 -

27 Mar 2023, 18:15

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/171478/Raspberry-Pi-Camera-Server-1.0-Authentication-Bypass.html -

17 Nov 2022, 21:28

Type Values Removed Values Added
CWE CWE-522
First Time Camp Project
Camp Project camp
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
CPE cpe:2.3:a:camp_project:camp:*:*:*:*:*:*:*:*
References (MISC) https://github.com/patrickfuller/camp/commit/bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 - (MISC) https://github.com/patrickfuller/camp/commit/bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 - Patch, Third Party Advisory
References (MISC) https://github.com/ehtec/camp-exploit - (MISC) https://github.com/ehtec/camp-exploit - Third Party Advisory
References (MISC) https://medium.com/@elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904 - (MISC) https://medium.com/@elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904 - Exploit, Third Party Advisory

14 Nov 2022, 22:51

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-14 21:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-37109

Mitre link : CVE-2022-37109

CVE.ORG link : CVE-2022-37109


JSON object : View

Products Affected

camp_project

  • camp
CWE
CWE-522

Insufficiently Protected Credentials