Lucene search

K
cveMitreCVE-2022-36539
HistorySep 07, 2022 - 5:15 p.m.

CVE-2022-36539

2022-09-0717:15:08
CWE-639
mitre
web.nvd.nist.gov
33
2
wedaycare b.v
ouderapp
cve-2022-36539
id alteration
unauthorized access

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

48.2%

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children.

Affected configurations

Nvd
Node
eigen\&wijzer_ouderapp_projecteigen\&wijzer_ouderappRange<1.1.22iphone_os
VendorProductVersionCPE
eigen\&wijzer_ouderapp_projecteigen\&wijzer_ouderapp*cpe:2.3:a:eigen\&wijzer_ouderapp_project:eigen\&wijzer_ouderapp:*:*:*:*:*:iphone_os:*:*

Social References

More

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

48.2%

Related for CVE-2022-36539