CVE-2022-31886

概要

参考情報

• cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/2fa-bypass-via-x-csrf · Exploit
• drive.google.com/drive/folders/1Zy5Oa-maLo0ACfLz90uvxqxwG18DwAZY · Exploit
• marvalglobal.com · Product
• servicedeskinstitute.com/casestudies/who-is-marval-software · Third Party Advisory

marval msm のその他の脆弱性

• CVE-2022-31887緊急 9.8Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organiz…
• CVE-2022-31884中 6.5Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys incl…
• CVE-2022-31885緊急 9.8Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.
• CVE-2022-31883高 8.8Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users A…