Lucene search
GoogleOSV:CVE-2022-22108HistoryJan 05, 2022 - 3:15 p.m.
CVE-2022-22108
2022-01-0515:15:07
Google
osv.dev
2
In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| daybydaycrm | eq | 2.0.0 | |
| daybydaycrm | eq | 2.2.0 | |
| daybydaycrm | eq | 2.1.0 |
Related
nvd
nvd
CVE-2022-22108
2022-01-05 15:15:07
cnvd
cnvd
DayByDay CRM Information Disclosure Vulnerability (CNVD-2022-68548)
2022-01-06 00:00:00
cvelist
cvelist
CVE-2022-22108 DayByDay CRM - Missing Authorization when Viewing Absences
2022-01-05 15:05:18
github
github
Missing Authorization in DayByDay CRM
2022-01-08 00:31:52
osv
osv
Missing Authorization in DayByDay CRM
2022-01-08 00:31:52
prion
prion
Authorization
2022-01-05 15:15:00
cve
cve
CVE-2022-22108
2022-01-05 15:15:07