CVE-2022-45166: Medium severity archibus web central vulnerability

Published Jan 10, 2023

Updated

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

Affected Software

1 affected component

Archibus Archibus Web Central=2022.03.01.107

Event History

Jan 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-45166?

The severity of CVE-2022-45166 is medium, with a severity value of 4.3.

How does CVE-2022-45166 affect Archibus Web Central?

CVE-2022-45166 affects Archibus Web Central version 2022.03.01.107.

What is the vulnerability in CVE-2022-45166?

The vulnerability in CVE-2022-45166 is a service exposed by Archibus Web Central that accepts user-controlled parameters leading to unauthorized access.

How can the vulnerability in CVE-2022-45166 be exploited?

The vulnerability in CVE-2022-45166 can be exploited by a basic user to access data unrelated to their role.

Is there a reference for more information on CVE-2022-45166?

Yes, you can find more information on CVE-2022-45166 at the following link: https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/