CVE-2022-36983
CVE-2022-36983
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 4.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
29 mar 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetSettings class. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-15919.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Productos afectados
Ivanti · Avalanche¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →