CVE-2022-1401

ALTO 7.5CVE-2022-1401 · Published 17/08/2022 · updated 17/06/2026

In breve

CVE-2022-1401 è una vulnerabilità ALTO (CVSS 7.5) che riguarda cmdb (device42).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 18.9%, superiore al 97.3% delle vulnerabilità.
Correzione: aggiornare a 18.01.00 o successiva.

Package	Affected versions	Patched versions
cmdb device42	`< 18.01.00`	`18.01.00`

Description

Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive server files with root permissions. This issue affects: Device42 CMDB versions prior to 18.01.00.

References

bitdefender.com/blog/labs/a-red-team-perspective-on-the-device42-asset-management-appliance · Third Party Advisory

Altre vulnerabilità di cmdb

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free