Lumada Asset Performance Management Security Vulnerabilities

CVE-2022-2155

A vulnerability exists in the affected versions of Lumada APM’s User Asset Group featuredue to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reportsfeature. An attacker that manages to exploit the vulnerability on a cus...