Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dvgd-81c2-e3ee
Vulnerability ID VCID-dvgd-81c2-e3ee
Aliases CVE-2022-0179
GHSA-w3v3-cxq5-9vr4
Summary Incorrect Default Permissions and Improper Access Control in snipe-it
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (5)
CWE-276 Incorrect Default Permissions
CWE-284 Improper Access Control
CWE-862 Missing Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00221 https://api.first.org/data/v1/epss?cve=CVE-2022-0179
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-w3v3-cxq5-9vr4
cvssv3.1 5.4 https://github.com/snipe/snipe-it
generic_textual MODERATE https://github.com/snipe/snipe-it
cvssv3.1 5.4 https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e
generic_textual MODERATE https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e
cvssv3.1 5.4 https://github.com/snipe/snipe-it/pull/10498
generic_textual MODERATE https://github.com/snipe/snipe-it/pull/10498
cvssv3.1 5.4 https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7
generic_textual MODERATE https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7
cvssv3.1 5.4 https://nvd.nist.gov/vuln/detail/CVE-2022-0179
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-0179
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-0179
https://github.com/snipe/snipe-it
https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e
https://github.com/snipe/snipe-it/pull/10498
https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7
CVE-2022-0179 https://nvd.nist.gov/vuln/detail/CVE-2022-0179
GHSA-w3v3-cxq5-9vr4 https://github.com/advisories/GHSA-w3v3-cxq5-9vr4
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/snipe/snipe-it
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/snipe/snipe-it/pull/10498
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-0179
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.44825
EPSS Score 0.00221
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:27:39.221262+00:00 GHSA Importer Import https://github.com/advisories/GHSA-w3v3-cxq5-9vr4 38.6.0