CVE-2022-34270

An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager...

CVE-2022-34270

An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager...

CVE-2022-34270

RWS WorldServer versions prior to 11.7.3 are affected by a design/logic flaw (CWE-284) that allows for improper access control . Specifically, regular users can exploit the UserWSUserManager component to create new users with the Administrator role, leading to unauthorized elevation of privileges...