PT-2023-14625
CVE-2022-45167
·
تاريخ النشر
2023-01-10
·
تاريخ التحديث
2025-04-09
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Archibus Web Central version 2022.03.01.107
Description
An issue was discovered in the application where a service exposed allows a basic user to access the profile information of all connected users.
Recommendations
For Archibus Web Central version 2022.03.01.107, consider restricting access to the exposed service to prevent basic users from accessing profile information of all connected users. As a temporary workaround, restrict the service's functionality until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾