CVE-2022-22831

概要

参考情報

• packetstormsecurity.com/files/165863/Servisnet-Tessa-Authentication-Bypass.html · Third Party Advisory
• servisnet.com.tr/en/page/products · Product
• exploit-db.com/exploits/50714 · Exploit
• pentest.com.tr/exploits/Servisnet-Tessa-Add-sysAdmin-User-Unauthenticated.html · Exploit

tessa のその他の脆弱性

• CVE-2022-22833高 7.5An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
• CVE-2022-22832緊急 9.8An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.