CVE-2022-2193: High severity hypr server vulnerability
Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2193?
The severity of CVE-2022-2193 is classified as high due to the potential for unauthorized manipulation of user accounts.
How do I fix CVE-2022-2193?
To fix CVE-2022-2193, upgrade the HYPR Server to version 6.14.1 or later.
Who is affected by CVE-2022-2193?
CVE-2022-2193 affects all versions of HYPR Server prior to 6.14.1.
What type of attack is associated with CVE-2022-2193?
CVE-2022-2193 is associated with an Insecure Direct Object Reference attack, enabling parameter tampering.
How can I verify my version against CVE-2022-2193?
To verify your version against CVE-2022-2193, check the HYPR Server version number in your system settings.