CVE-2022-31883

概要

参考情報

• cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/idor-leads-to-unauthorized-access-to-api-keys · Third Party Advisory
• drive.google.com/drive/folders/17Q8ItseCzj5W7wlD6ZFqL0y1N5Emxz4_ · Broken Link
• marvalglobal.com · Product

marval msm のその他の脆弱性

• CVE-2022-31887緊急 9.8Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organiz…
• CVE-2022-31884中 6.5Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys incl…
• CVE-2022-31886中 6.5Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a maliciou…
• CVE-2022-31885緊急 9.8Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.