CVE-2022-34827

Carel Boss Mini 1.5.0 has Improper Access Control.

• CWE-284

• https://github.com/mandiant/Vulnerability-DisclosuresThird Party Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0040/MNDT-2022-0040.mdExploit, Third Party Advisory
• https://github.com/mandiant/Vulnerability-DisclosuresThird Party Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0040/MNDT-2022-0040.mdExploit, Third Party Advisory

Published

Nov 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34821A vulnerability has been identified in RUGGEDCOM RM1224 LTE(…8.8
• CVE-2022-34822Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows…9.8
• CVE-2022-34823Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Window…9.8
• CVE-2022-34824Weak File and Folder Permissions vulnerability in CLUSTERPRO…9.8
• CVE-2022-34825Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Win…9.8
• CVE-2022-34826In Couchbase Server 7.1.x before 7.1.1, an encrypted Private…5.9
• CVE-2022-34829Zoho ManageEngine ADSelfService Plus before 6203 allows a de…7.5
• CVE-2022-3483An issue has been discovered in GitLab CE/EE affecting all v…5.4
• CVE-2022-34830An Arm product family through 2022-06-29 has a TOCTOU Race C…7.5
• CVE-2022-34831An issue was discovered in Keyfactor PrimeKey EJBCA before 7…9.8
• CVE-2022-34832An issue was discovered in VERMEG AgileReporter 21.3. XXE ca…6.5
• CVE-2022-34833An issue was discovered in VERMEG AgileReporter 21.3. An adm…5.4