CVE-2022-45167: Infoleak

Published Jan 10, 2023

Updated

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.

Affected Software

1 affected component

Archibus Archibus Web Central=2022.03.01.107

Event History

Jan 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-45167?

CVE-2022-45167 is an issue discovered in Archibus Web Central 2022.03.01.107, where a service exposed by the application allows a basic user to access the profile information of all connected users.

What software version is affected by CVE-2022-45167?

Archibus Web Central 2022.03.01.107 is affected by CVE-2022-45167.

How severe is CVE-2022-45167?

CVE-2022-45167 has a severity rating of medium (4.3).

How can I fix CVE-2022-45167?

To fix CVE-2022-45167, it is recommended to apply the necessary patches or updates provided by Archibus for Web Central 2022.03.01.107.

Where can I find more information about CVE-2022-45167?

For more information about CVE-2022-45167, you can refer to the following link: https://excellium-services.com/cert-xlm-advisory/CVE-2022-45167/