CVE-2022-3173

Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.

• CWE-287

• https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2Patch, Third Party Advisory
• https://huntr.dev/bounties/6d8ffcc6-c6e3-4385-8ead-bdbbbacf79e9Exploit, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2Patch, Third Party Advisory
• https://huntr.dev/bounties/6d8ffcc6-c6e3-4385-8ead-bdbbbacf79e9Exploit, Third Party Advisory

Published

Sep 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31707vRealize Operations (vROps) contains a privilege escalation …7.2
• CVE-2022-31708vRealize Operations (vROps) contains a broken access control…4.9
• CVE-2022-3171A parsing issue with binary data in protobuf-java core and l…7.5
• CVE-2022-31710vRealize Log Insight contains a deserialization vulnerabilit…7.5
• CVE-2022-31711VMware vRealize Log Insight contains an Information Disclosu…5.3
• CVE-2022-3172A security issue was discovered in kube-apiserver that allow…8.2
• CVE-2022-31733Starting with diego-release 2.55.0 and up to 2.69.0, and sta…9.1
• CVE-2022-31734Cisco Catalyst 2940 Series Switches provided by Cisco System…6.1
• CVE-2022-31735OpenAM Consortium Edition version 14.0.0 provided by OpenAM …6.1
• CVE-2022-31736A malicious website could have learned the size of a cross-o…9.8
• CVE-2022-31737A malicious webpage could have caused an out-of-bounds write…9.8
• CVE-2022-31738When exiting fullscreen mode, an iframe could have confused …6.5