exploitDog

CVE-2022-26247

Опубликовано: 20 мар. 2022

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password.

Ссылки

https://github.com/xiweicheng/tms/issues/16
Exploit
Issue Tracking
Third Party Advisory
https://github.com/xiweicheng/tms/issues/16
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:teamwork_management_system_project:teamwork_management_system:2.28.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00148

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-f75q-32fx-627q

CVSS3: 5.9

github

почти 4 года назад

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password.

EPSS

Процентиль: 35%

0.00148

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-732