Lucene search

[email protected]CVE-2022-30495

HistoryMay 26, 2022 - 5:15 p.m.

CVE-2022-30495

2022-05-2617:15:09

CWE-639

[email protected]

web.nvd.nist.gov

cve-2022-30495

automotive shop management system

idor

broken access control

vertical privilege escalation

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)

Affected configurations

NVD

Node

automotive_shop_management_system_projectautomotive_shop_management_systemMatch1.0

CPENameOperatorVersion
automotive_shop_management_system_project:automotive_shop_management_systemautomotive shop management system project automotive shop management systemeq1.0

CPE	Name	Operator	Version
automotive_shop_management_system_project:automotive_shop_management_system	automotive shop management system project automotive shop management system	eq	1.0

References

github.com/nsparker1337/OpenSource/blob/main/exploit_idor_asms.md

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON

Related for CVE-2022-30495

cnvd1 prion1 cvelist1 nvd1