← back
CVE-2022-30670

Escalate Privileges to Server Admin - Robohelp Server

CVSS 8.8 HIGHEPSS 1.3%CWE-285
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 1.3%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
16 Jun 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Adobe · RoboHelp

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →