CVE-2022-29597

Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the file contents of the internal system file requested. This ability could allow for adversaries to extract sensitive data and/or files from the underlying file system, gain knowledge about the internal workings of the system, or access source code of the application.

• CWE-22

• https://github.com/TheGetch/CVE-2022-29597Exploit, Third Party Advisory
• https://solutions-atlantic.com/rrs/Product
• https://github.com/TheGetch/CVE-2022-29597Exploit, Third Party Advisory
• https://solutions-atlantic.com/rrs/Product

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2959A race condition was found in the Linux kernel's watch queue…7
• CVE-2022-29591Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList b…9.8
• CVE-2022-29592Tenda TX9 Pro 22.03.02.10 devices allow OS command injection…9.8
• CVE-2022-29593relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with fir…5.9
• CVE-2022-29594eG Agent before 7.2 has weak file permissions that enable es…7.8
• CVE-2022-29596MicroStrategy Enterprise Manager 2022 allows authentication …9.8
• CVE-2022-29598Solutions Atlantic Regulatory Reporting System (RRS) v500 is…6.1
• CVE-2022-29599In Apache Maven maven-shared-utils prior to version 3.3.3, t…9.8
• CVE-2022-29600The oelib (aka One is Enough Library) extension through 4.1.…9.8
• CVE-2022-29601The seminars (aka Seminar Manager) extension through 4.1.3 f…9.8
• CVE-2022-29602The gridelements (aka Grid Elements) extension through 7.6.1…5.4
• CVE-2022-29603A SQL Injection vulnerability exists in UniverSIS UniverSIS-…8.1