CVE-2022-45166

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

• CWE-284

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45166
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/Third Party Advisory
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/Third Party Advisory

Published

Jan 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45155An Improper Handling of Exceptional Conditions vulnerability…5.5
• CVE-2022-45157A vulnerability has been identified in the way that Rancher …9.1
• CVE-2022-4516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-45163An information-disclosure vulnerability exists on select NXP…4.6
• CVE-2022-45164An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45165An issue was discovered in Archibus Web Central 2022.03.01.1…8.8
• CVE-2022-45167An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45168An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45169An issue was discovered in LIVEBOX Collaboration vDesk throu…5.4
• CVE-2022-45170An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45171An issue was discovered in LIVEBOX Collaboration vDesk throu…8.8
• CVE-2022-45172An issue was discovered in LIVEBOX Collaboration vDesk befor…9.8