CVE-2022-45172

An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected by flaws in authorization logic, through which a malicious user (with no privileges) is able to perform privilege escalation to the administrator role, and steal the accounts of any users on the system.

• CWE-863
• CWE-863

• https://www.gruppotim.it/it/footer/red-team.htmlExploit, Third Party Advisory
• https://www.gruppotim.it/it/footer/red-team.htmlExploit, Third Party Advisory

Published

Jan 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45166An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45167An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45168An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45169An issue was discovered in LIVEBOX Collaboration vDesk throu…5.4
• CVE-2022-45170An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45171An issue was discovered in LIVEBOX Collaboration vDesk throu…8.8
• CVE-2022-45173An issue was discovered in LIVEBOX Collaboration vDesk throu…9.8
• CVE-2022-45174An issue was discovered in LIVEBOX Collaboration vDesk throu…9.8
• CVE-2022-45175An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45176An issue was discovered in LIVEBOX Collaboration vDesk throu…5.4
• CVE-2022-45177An issue was discovered in LIVEBOX Collaboration vDesk throu…7.5
• CVE-2022-45178An issue was discovered in LIVEBOX Collaboration vDesk throu…8.8