Design/Logic Flaw

2023-01-1021:15:00

PRIOn knowledge base

www.prio-n.com

archibus

web central

unauthorized access

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.

CPENameOperatorVersion
archibus_web_centraleq2022.03.01.107

CPE	Name	Operator	Version
	archibus_web_central	eq	2022.03.01.107

References

excellium-services.com/cert-xlm-advisory/CVE-2022-45167/