CVE-2022-27192

2022-03-2321:22:38

mitre

www.cve.org

cve-2022-27192

aseco lietuva

document management system

dvs avilys

unauthorized file download

unauthenticated attacker

administrator files

EPSS

0.002

Percentile

52.5%

JSON

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

References

github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.md

lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/

EPSS

0.002

Percentile

52.5%

JSON

Related for CVELIST:CVE-2022-27192