CVE-2022-45167

Name of the Vulnerable Software and Affected Versions Archibus Web Central version 2022.03.01.107

Description An issue was discovered in the application where a service exposed allows a basic user to access the profile information of all connected users.

Recommendations For Archibus Web Central version 2022.03.01.107, consider restricting access to the exposed service to prevent basic users from accessing profile information of all connected users. As a temporary workaround, restrict the service's functionality until a patch is available.