CVE-2022-43438

CVE-2022-43438 concerns EasyTest (by HWA JIUH DIGITAL TECHNOLOGY LTD). The Administrator function exposes an Incorrect Authorization flaw that allows an authenticated general-user to bypass access controls and perform restricted API calls, potentially manipulating the system and terminating servi...

CVE-2022-43438 HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Incorrect Authorization

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service...