PT-2022-20579 · Tovy · Tovy
CVE-2022-31164
·
Published
2022-07-21
·
Updated
2022-07-31
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Tovy versions prior to 0.7.51
Description
A vulnerability in Tovy allows users to log in as other users, including privileged users such as the owner of the instance.
Recommendations
For versions prior to 0.7.51, update to version 0.7.51 to resolve the issue.
Exploit
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tovy