CVE-2022-45167

This CVE affects Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic (low-privilege) user to access the profile information of all connected users, constituting an information disclosure risk. According to NVD, the issue has a CVSS v3.1 base score of 4.3 (Medi...

CVE-2022-45166

CVE-2022-45166 affects Archibus Web Central 2022.03.01.107. The issue arises in a service exposed by the application that accepts user-controlled parameters and uses them to act on the data returned to the user. This design allows a basic user to access data unrelated to their role, revealing a d...

CVE-2022-45164

CVE-2022-45164 — Summary (MODE C) Affected product: Archibus Web Central version 2022.03.01.107. Vulnerability: A service exposed by the Archibus Web Central application permits a basic user, who is not a member of a booking, to cancel (delete) that booking created by someone else. Impact: Unauth...