Lucene search

HYPRCVE-2022-3258

HistoryNov 03, 2022 - 7:15 p.m.

CVE-2022-3258

2022-11-0319:15:09

CWE-732

HYPR

web.nvd.nist.gov

cve-2022-3258

incorrect permission assignment

hypr workforce access

windows

authentication abuse

nvd

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

Affected configurations

Nvd

Node

hyprworkforce_accessRange<7.7.1

VendorProductVersionCPE
hyprworkforce_access*cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hypr	workforce_access	*	cpe:2.3:a:hypr:workforce_access::::::::

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows"
    ],
    "product": "Workforce Access",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "7.7.1",
        "status": "affected",
        "version": "0",
        "versionType": "patch 1"
      }
    ]
  }
]

References

www.hypr.com/security-advisories

Social References

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

Related for CVE-2022-3258