PT-2022-26850 · Telos Alliance · Telos Alliance Omnia Mpx Node
CVE-2022-43326
·
Published
2022-11-29
·
Updated
2025-04-25
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.[*]
Description
An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function allows attackers to arbitrarily change user and Administrator account passwords.
Recommendations
For Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.[*], as a temporary workaround, consider disabling the password reset function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Telos Alliance Omnia Mpx Node