CVE-2022-32769: Medium severity wwbn avideo vulnerability
Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Playlists plugin, allowing an attacker to bypass authentication by guessing a sequential ID, allowing them to take over the another user's playlists.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32769?
CVE-2022-32769 is classified as a high severity vulnerability due to its potential for authentication bypass and unauthorized access.
How do I fix CVE-2022-32769?
To fix CVE-2022-32769, update AVideo to version 11.6 or apply any available security patches provided by the vendor.
What versions of AVideo are affected by CVE-2022-32769?
CVE-2022-32769 affects AVideo version 11.6 and potentially other dev master commits prior to the fix.
Can CVE-2022-32769 be exploited remotely?
Yes, an attacker can exploit CVE-2022-32769 remotely by sending a specially-crafted HTTP request to the vulnerable system.
What potential impact can CVE-2022-32769 have on an organization?
The exploitation of CVE-2022-32769 can lead to unauthorized takeover of resources, compromising sensitive information and organizational integrity.