CVE-2022-32169 bytebase - Improper Authorization

2022-09-2100:00:00

CWE-285

Mend

www.cve.org

cve-2022

bytebase

improper authorization

unauthorized access

admin issues

endpoint

/issue

AI Score

6.8

Confidence

Low

EPSS

Percentile

12.8%

JSON

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

CNA Affected

[
  {
    "product": "bytebase",
    "vendor": "bytebase",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]