mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP     archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain     sensitive information via a crafted archive. (CVE-2022-35410)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5185 advisory.

    A directory traversal vulnerability was discovered in the Metadata anonymisation toolkit, which could     result in information disclosure via a malformed ZIP archive. For the oldstable distribution (buster),     this problem has been fixed in version 0.8.0-3+deb10u1. For the stable distribution (bullseye), this     problem has been fixed in version 0.12.1-2+deb11u1. We recommend that you upgrade your mat2 packages. For     the detailed security status of mat2 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/mat2

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 830855f3-ffcc-11ec-9d41-d05099c8b5a7 advisory.

  - mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP     archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain     sensitive information via a crafted archive. (CVE-2022-35410)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
258872	Linux Distros Unpatched Vulnerability : CVE-2022-35410	Nessus	Misc.	high
163264	Debian DSA-5185-1 : mat2 - security update	Nessus	Debian Local Security Checks	high
162970	FreeBSD : mat2 -- directory traversal/arbitrary file read during ZIP file processing (830855f3-ffcc-11ec-9d41-d05099c8b5a7)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2022-35410

high

Tenable Plugins

high

high

high