CVE-2022-45164: Medium severity archibus web central vulnerability
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-45164?
The severity of CVE-2022-45164 is medium with a severity value of 4.3.
How does CVE-2022-45164 affect Archibus Web Central?
CVE-2022-45164 affects Archibus Web Central version 2022.03.01.107.
What is the vulnerability in Archibus Web Central?
The vulnerability in Archibus Web Central is that a basic user can cancel (delete) a booking created by someone else, even if they are not a member of the booking.
How can I fix CVE-2022-45164 in Archibus Web Central?
To fix CVE-2022-45164 in Archibus Web Central, you should apply the necessary patch or update provided by the vendor as soon as it is available.
Where can I find more information about CVE-2022-45164?
You can find more information about CVE-2022-45164 at the following link: [CVE-2022-45164](https://excellium-services.com/cert-xlm-advisory/CVE-2022-45164/)