Lucene search
PRIOn knowledge basePRION:CVE-2022-22108HistoryJan 05, 2022 - 3:15 p.m.
Authorization
2022-01-0515:15:00
PRIOn knowledge base
www.prio-n.com
4
In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| daybyday_crm | ge | 2.0.0 | |
| daybyday_crm | le | 2.2.0 |
Related
nvd
nvd
CVE-2022-22108
2022-01-05 15:15:07
cnvd
cnvd
DayByDay CRM Information Disclosure Vulnerability (CNVD-2022-68548)
2022-01-06 00:00:00
cvelist
cvelist
CVE-2022-22108 DayByDay CRM - Missing Authorization when Viewing Absences
2022-01-05 15:05:18
github
github
Missing Authorization in DayByDay CRM
2022-01-08 00:31:52
osv
osv
CVE-2022-22108
2022-01-05 15:15:07
Missing Authorization in DayByDay CRM
2022-01-08 00:31:52
cve
cve
CVE-2022-22108
2022-01-05 15:15:07