Vulnerability · Published Jul 29, 2022 · Assigned by rapid7
CVE-2022-35629Velociraptor Client ID Spoofing
Medium 5.4
In plain English
A medium-severity improper authentication in Velociraptor from Rapid7. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)0.5%top 59.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to the server claiming to come from another client ID. This issue was resolved in Velociraptor 0.6.5-2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rapid7 | Velociraptor | 0.6.5-2 – before 0.6.5-2 |
Weakness: CWE-287