CVE-2022-46901

2023-07-2500:00:00

mitre

www.cve.org

vocera report server

voice server

access control violation

database operations

websocket interface

unauthenticated execution

system tasks

0.001 Low

EPSS

Percentile

24.0%

JSON

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This includes system tasks, and backing up, loading, and clearing of the database.