CVE-2022-45167

Summary

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45167/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45167/
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45167

• ←Previous
• Next→