CVE-2022-45166

Summary

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45166

• ←Previous
• Next→