CVE-2022-29008: Medium severity bus pass management system vulnerability
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29008?
CVE-2022-29008 is categorized as a high-severity vulnerability due to its potential to expose sensitive information.
How does CVE-2022-29008 affect Bus Pass Management System v1.0?
CVE-2022-29008 allows attackers to exploit an insecure direct object reference to access unauthorized data within Bus Pass Management System v1.0.
How can I fix CVE-2022-29008?
To remediate CVE-2022-29008, implement proper access controls and validation checks to prevent unauthorized access to objects.
Who is affected by CVE-2022-29008?
Users and administrators of Bus Pass Management System v1.0 are susceptible to CVE-2022-29008 if they do not secure their applications properly.
What types of data could be exposed by CVE-2022-29008?
CVE-2022-29008 could potentially expose sensitive user information accessible through the vulnerable viewid parameter.