CVE-2022-36542: Medium severity Edoc-doctor-appointment-system Project Edoc-doctor-appointment-system vulnerability
An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-36542?
CVE-2022-36542 refers to an access control vulnerability in the Edoc-doctor-appointment-system v1.0.1 that allows unauthorized users to edit, read, and delete Administrator data.
What is the severity of CVE-2022-36542?
CVE-2022-36542 is classified as a critical vulnerability due to its potential impact on sensitive Administrator data.
How do I fix CVE-2022-36542?
To fix CVE-2022-36542, update to a patched version of Edoc-doctor-appointment-system that addresses the access control issue.
Who is affected by CVE-2022-36542?
Any users or organizations utilizing Edoc-doctor-appointment-system version 1.0.1 are at risk due to CVE-2022-36542.
What kind of attacks can be executed using CVE-2022-36542?
Attackers can leverage CVE-2022-36542 to perform unauthorized operations such as editing, reading, or deleting critical Administrator information.