Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-48341
HistoryFeb 23, 2023 - 6:15 a.m.

Privilege escalation

2023-02-2306:15:00
PRIOn knowledge base
www.prio-n.com
2
thingsboard
vertical privilege escalation
tenant administrator
system administrator
scopes parameter.

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.

CPENameOperatorVersion
thingsboardeq3.4.1

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

Related for PRION:CVE-2022-48341