CVE-2022-32768: Medium severity wwbn avideo vulnerability
Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to bypass authentication by guessing a sequential ID, allowing them to take over the another user's streams.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32768?
CVE-2022-32768 is classified as a high-severity vulnerability due to its potential to allow unauthorized access and resource takeover.
How do I fix CVE-2022-32768?
To fix CVE-2022-32768, update WWBN AVideo to version 11.7 or later, as it contains patches for the identified vulnerabilities.
What is affected by CVE-2022-32768?
CVE-2022-32768 affects WWBN AVideo version 11.6 and the development master commit 3f7c0364.
Can CVE-2022-32768 be exploited remotely?
Yes, CVE-2022-32768 can be exploited remotely through specially-crafted HTTP requests by authenticated users.
What are the implications of CVE-2022-32768 for users?
The implications of CVE-2022-32768 include the risk of unauthorized access and potential takeover of user resources on affected systems.