First published: Sun Jul 17 2022(Updated: )
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Pexip Pexip Infinity | <27.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-26656 is a vulnerability in Pexip Infinity before version 27.3 that allows remote attackers to trigger a software abort and possibly enumerate usernames via One Touch Join.
The severity of CVE-2022-26656 is high with a severity value of 8.2.
To fix CVE-2022-26656, you should update Pexip Infinity to version 27.3 or later.
Yes, you can find more information about CVE-2022-26656 at https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26656.