Lucene search

K
cvelistHYPRCVELIST:CVE-2022-3258
HistoryNov 03, 2022 - 6:04 p.m.

CVE-2022-3258

2022-11-0318:04:32
CWE-732
HYPR
www.cve.org
1
vulnerability
incorrect permission assignment
critical resource
authentication abuse
hypr workforce access
windows

CVSS3

3.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

9

Confidence

High

EPSS

0.001

Percentile

26.4%

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows"
    ],
    "product": "Workforce Access",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "7.7.1",
        "status": "affected",
        "version": "0",
        "versionType": "patch 1"
      }
    ]
  }
]

CVSS3

3.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

9

Confidence

High

EPSS

0.001

Percentile

26.4%

Related for CVELIST:CVE-2022-3258