CVE-2022-25151

ALTO 7.5CVE-2022-25151 · Published 09/06/2022 · updated 17/06/2026

In breve

CVE-2022-25151 è una vulnerabilità ALTO (CVSS 7.5) che riguarda on-premise (itarian), saas service desk (itarian).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.83%, superiore al 57.9% delle vulnerabilità.
Correzione: aggiornare a 6.35.37347.20040 o successiva.

Package	Affected versions	Patched versions
on-premise itarian	`< 6.35.37347.20040`	`6.35.37347.20040`
saas service desk itarian	`< 6.35.37347.20040`	`6.35.37347.20040`

Description

Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the management interface by using this vulnerability in combination with a successful Cross-Site Scripting attack on a user.

References

csirt.divd.nl/CVE-2022-25151 · Third Party Advisory
csirt.divd.nl/DIVD-2021-00037 · Third Party Advisory

Altre vulnerabilità di on-premise

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free