PT-2023-14625
CVE-2022-45167
·
Publicado
2023-01-10
·
Atualizado
2025-04-09
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Archibus Web Central version 2022.03.01.107
Description
An issue was discovered in the application where a service exposed allows a basic user to access the profile information of all connected users.
Recommendations
For Archibus Web Central version 2022.03.01.107, consider restricting access to the exposed service to prevent basic users from accessing profile information of all connected users. As a temporary workaround, restrict the service's functionality until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾