Design/Logic Flaw

2023-01-1021:15:00

PRIOn knowledge base

www.prio-n.com

archibus web central

security flaw

booking cancellation

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking

CPENameOperatorVersion
archibus_web_centraleq2022.03.01.107

CPE	Name	Operator	Version
	archibus_web_central	eq	2022.03.01.107

References

excellium-services.com/cert-xlm-advisory/CVE-2022-45164/