Lucene search
HistorySep 13, 2022 - 11:15 p.m.
CVE-2022-38770
cve-2022-38770
transtek mojodat
fam
fixed asset management
data security
remote attack
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.8%
The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users’ data upon a successful login request.
Affected configurations
Node
transtekmojodat_fixed_asset_managementMatch2.4.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| transtek:mojodat_fixed_asset_management | transtek mojodat fixed asset management | eq | 2.4.6 |
Social References
More
Related
prion
prion
Cross site request forgery (csrf)
2022-09-13 23:15:00
nvd
nvd
CVE-2022-38770
2022-09-13 23:15:08
cvelist
cvelist
CVE-2022-38770
2022-09-13 22:12:11
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.8%
Related for CVE-2022-38770