7.5
CVE-2022-26665
- EPSS 0.49%
- Veröffentlicht 18.04.2022 15:15:08
- Zuletzt bearbeitet 21.11.2024 06:54:17
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case records.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tylertech ≫ Odyssey Portal Version < 17.1.20
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.646 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-639 Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.