CVE-2022-1747

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization.

• CWE-346

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01Mitigation, Third Party Advisory, US Government Resource

Published

Jun 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1741The tested version of Dominion Voting Systems ImageCast X ha…6.8
• CVE-2022-1742The tested version of Dominion Voting Systems ImageCast X al…6.8
• CVE-2022-1743The tested version of Dominion Voting System ImageCast X can…6.8
• CVE-2022-1744Applications on the tested version of Dominion Voting System…6.8
• CVE-2022-1745The authentication mechanism used by technicians on the test…6.8
• CVE-2022-1746The authentication mechanism used by poll workers to adminis…7.6
• CVE-2022-1748Softing OPC UA C++ Server SDK, Secure Integration Server, ed…7.5
• CVE-2022-1749The WPMK Ajax Finder WordPress plugin is vulnerable to Cross…8.8
• CVE-2022-1750The Sticky Popup plugin for WordPress is vulnerable to Store…4.8
• CVE-2022-1751The Skitter Slideshow plugin for WordPress is vulnerable to …7.2
• CVE-2022-1752Unrestricted Upload of File with Dangerous Type in GitHub re…8
• CVE-2022-1753A vulnerability, which was classified as critical, was found…4.3