CVE-2022-32282
Last modified
CVE-2022-32282 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.. EPSS estimates a 1.59% chance of exploitation in the next 30 days.
Description
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wwbn | Avideo | 11.6 |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1545Exploit, Technical Description, Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1545Exploit, Technical Description, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-32282?
How severe is CVE-2022-32282?
How do I fix CVE-2022-32282?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-32275Grafana 8.4.3 allows reading files via (for example) a /dash…7.5
- CVE-2022-32276Grafana 8.4.3 allows unauthenticated access via (for example…7.5
- CVE-2022-32277Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Ob…5.3
- CVE-2022-32278XFCE 4.16 allows attackers to execute arbitrary code because…8.8
- CVE-2022-3228Using custom code, an attacker can write into name or descri…6.5
- CVE-2022-32280Authenticated (contributor or higher user role) Stored Cross…5.4
- CVE-2022-32283Browse restriction bypass vulnerability in Cabinet of Cybozu…4.3
- CVE-2022-32284Use of insufficiently random values vulnerability exists in …7.5
- CVE-2022-32285A vulnerability has been identified in Mendix SAML Module (M…7.5
- CVE-2022-32286A vulnerability has been identified in Mendix SAML Module (M…6.1
- CVE-2022-32287A relative path traversal vulnerability in a FileUtil class …7.5
- CVE-2022-32288Rejected reason: This CVE ID has been rejected or withdrawn …
Are you affected by CVE-2022-32282?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST