CVE-2022-28719: Critical severity hammock assetview vulnerability
Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28719?
CVE-2022-28719 has a high severity due to the potential for unauthorized remote code execution.
How do I fix CVE-2022-28719?
To mitigate CVE-2022-28719, upgrade AssetView to version 13.2.0 or later.
What type of vulnerability is CVE-2022-28719?
CVE-2022-28719 is a missing authentication vulnerability affecting critical functions.
Who is affected by CVE-2022-28719?
CVE-2022-28719 affects users of AssetView prior to version 13.2.0.
What can an attacker do with CVE-2022-28719?
An attacker exploiting CVE-2022-28719 can upload a crafted configuration file, potentially leading to arbitrary code execution on managed clients.