Lucene search
China National Vulnerability DatabaseCNVD-2022-70580HistorySep 28, 2022 - 12:00 a.m.
Rocket.Chat elevation of privilege vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
rocket.chat
elevation of privilege
improper privilege management
authenticated attacker
view messages
0.001 Low
EPSS
Percentile
20.0%
Rocket.Chat, an open source team chat software, suffers from an elevation of privilege vulnerability due to improper privilege management in the application, which can be exploited by any authenticated attacker to elevate privileges to view directly connected messages without proper privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rocket.chat rocket.chat | lt | 5.0 |
Related
prion
prion
Privilege escalation
2022-09-23 19:15:00
nvd
nvd
CVE-2022-35250
2022-09-23 19:15:14
cve
cve
CVE-2022-35250
2022-09-23 19:15:14
cvelist
cvelist
CVE-2022-35250
2022-09-23 18:28:12
osv
osv
CVE-2022-35250
2022-09-23 19:15:14
