CVE-2022-26155

概要

参考情報

• l00neyhacker/CVE-2022-26155 · Third Party Advisory
• help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html · Release Notes

cherwell service management のその他の脆弱性

• CVE-2022-26158中 6.1An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains suppli…
• CVE-2022-26157中 5.3An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by…
• CVE-2022-26156中 6.1An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the Rela…