CVE-2022-31884

概要

参考情報

• cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/unauthorized-delete-add-api-users-api-keys · Exploit
• drive.google.com/drive/folders/1lFM9cVUqTlKyDI2azmI1rIF4HoZBt_4i · Broken Link
• marvalglobal.com · Product

marval msm のその他の脆弱性

• CVE-2022-31887緊急 9.8Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organiz…
• CVE-2022-31886中 6.5Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a maliciou…
• CVE-2022-31885緊急 9.8Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.
• CVE-2022-31883高 8.8Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users A…