Lucene search
HistorySep 13, 2022 - 8:15 p.m.
CVE-2022-32555
unisys
csrf
authentication
post request
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.8%
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn’t have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur.
Affected configurations
Node
unisysdata_exchange_management_studioMatch6.0.ic1
ORunisysdata_exchange_management_studioMatch7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| unisys | data_exchange_management_studio | 6.0.ic1 | cpe:2.3:a:unisys:data_exchange_management_studio:6.0.ic1:*:*:*:*:*:*:* |
| unisys | data_exchange_management_studio | 7.0 | cpe:2.3:a:unisys:data_exchange_management_studio:7.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-32555
2022-09-13 20:15:09
prion
prion
Cross site request forgery (csrf)
2022-09-13 20:15:00
cvelist
cvelist
CVE-2022-32555
2022-09-13 19:29:18
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.8%
Related for NVD:CVE-2022-32555