CVE-2022-45027

Description

perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.

Affected Platforms

Weakness Type

CWE-918, CWE-918

References

• https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
• https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/
• https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
• https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/