Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-12749
HistoryFeb 17, 2022 - 12:00 a.m.

snipe-it elevation of privilege vulnerability

2022-02-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
snipe-it
elevation of privilege
vulnerability
improper privilege management
asset management
maintenance
cnvd

EPSS

0.001

Percentile

41.1%

Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create maintenance for any asset.

EPSS

0.001

Percentile

41.1%