7.5
CVE-2022-39030
- EPSS 0.85%
- Veröffentlicht 28.09.2022 04:15:14
- Zuletzt bearbeitet 21.11.2024 07:17:24
- Quelle twcert@cert.org.tw
- CVE-Watchlists
- Unerledigt
Loginsmart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lcnet ≫ Smart Evision Version2022.02.21
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.85% | 0.741 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| twcert@cert.org.tw | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.