Lucene search

[email protected]CVE-2022-45183

HistoryNov 14, 2022 - 8:15 a.m.

CVE-2022-45183

2022-11-1408:15:09

CWE-269

[email protected]

web.nvd.nist.gov

cve-2022-45183

escalation of privileges

web server

ironman software

powershell universal

nvd

security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.1%

JSON

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.

Affected configurations

NVD

Node

ironmansoftwarepowershell_universalRange2.0.0–2.12.6

ironmansoftwarepowershell_universalRange3.0.0–3.4.7

ironmansoftwarepowershell_universalRange3.5.0–3.5.3

CPENameOperatorVersion
ironmansoftware:powershell_universalironmansoftware powershell universallt2.12.6
ironmansoftware:powershell_universalironmansoftware powershell universallt3.4.7
ironmansoftware:powershell_universalironmansoftware powershell universallt3.5.3

CPE	Name	Operator	Version
ironmansoftware:powershell_universal	ironmansoftware powershell universal	lt	2.12.6
ironmansoftware:powershell_universal	ironmansoftware powershell universal	lt	3.4.7
ironmansoftware:powershell_universal	ironmansoftware powershell universal	lt	3.5.3

References

blog.ironmansoftware.com/psu-2022-11-cve/

docs.powershelluniversal.com/changelog

ironmansoftware.com

Social References

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.1%

JSON

Related for CVE-2022-45183

prion1 cvelist1 nvd1