CVE-2022-25027: High severity rocket software trufusion enterprise vulnerability
Published Jan 12, 2023
·Updated
The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user's session token when the "Password forgotten?" button is clicked.
Affected Software
1 affected component
Rocketsoftware Trufusion Enterprise<7.9.5.1
Remediation
Event History
Jan 12, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-25027?
CVE-2022-25027 is classified as a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2022-25027?
To address CVE-2022-25027, update Rocket TRUfusion Portal to version 7.9.5.1 or later.
3
What is the impact of CVE-2022-25027?
CVE-2022-25027 allows remote attackers to bypass authentication, leading to unauthorized access to restricted pages.
4
Which versions of Rocket TRUfusion Portal are affected by CVE-2022-25027?
CVE-2022-25027 affects Rocket TRUfusion Portal versions prior to 7.9.5.1.
5
Is there a patch available for CVE-2022-25027?
Yes, a patch is available by upgrading to Rocket TRUfusion Portal version 7.9.5.1 or newer.