CVE-2022-24252

概要

参考情報

• whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure · Exploit

portfolio のその他の脆弱性

• CVE-2022-24255高 8.8Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.
• CVE-2022-24254高 8.8An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to exec…
• CVE-2022-24253高 8.8Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransfe…
• CVE-2022-24251高 8.8Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload funct…