Lucene search
HackeroneCVELIST:CVE-2022-44569HistoryNov 03, 2023 - 6:13 p.m.
CVE-2022-44569
2023-11-0318:13:19
hackerone
www.cve.org
2
insecure communication
local attacker
authentication bypass
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0
Percentile
9.0%
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
CNA Affected
[
{
"defaultStatus": "unaffected",
"vendor": "Ivanti",
"product": "Automation",
"versions": [
{
"version": "2023.4",
"status": "affected",
"lessThan": "2023.4",
"versionType": "semver"
}
]
}
]Related
prion
prion
Authentication flaw
2023-11-03 20:15:00
nvd
nvd
CVE-2022-44569
2023-11-03 20:15:08
githubexploit
githubexploit
Exploit for Improper Authentication in Ivanti Automation
2024-05-08 13:00:16
cve
cve
CVE-2022-44569
2023-11-03 20:15:08
vulnrichment
vulnrichment
CVE-2022-44569
2023-11-03 18:13:19
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2022-44569