PT-2022-17740

CVE-2022-26247

·

Published

2022-03-20

·

Updated

2022-03-28

Description by

CVSS 3.1
5.9
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions TMS version 2.28.0
Description The issue is related to insecure permissions in the component "/TMS/admin/user/Update2". This allows attackers to modify the administrator account and password.
Recommendations For TMS version 2.28.0, consider restricting access to the "/TMS/admin/user/Update2" component until a patch is available to prevent modification of the administrator account and password.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2022-26247
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com