CVE-2022-38577: High severity ProcessMaker ProcessMaker vulnerability
Published Sep 19, 2022
·Updated
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.
Affected Software
1 affected component
ProcessMaker ProcessMaker<3.5.4
Event History
Sep 19, 2022
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-38577?
CVE-2022-38577 is classified as a high severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2022-38577?
To fix CVE-2022-38577, upgrade your ProcessMaker installation to version 3.5.4 or later.
3
Who is affected by CVE-2022-38577?
CVE-2022-38577 affects all versions of ProcessMaker prior to 3.5.4.
4
What does CVE-2022-38577 allow attackers to do?
CVE-2022-38577 allows attackers to escalate normal user accounts to administrative privileges.
5
What components of ProcessMaker are vulnerable in CVE-2022-38577?
The user profile page in ProcessMaker contains the insecure permissions vulnerability outlined in CVE-2022-38577.