CVE-2022-38168

Katalog CVE

CVSS 9.1 · Critical EPSS 1,2%

Kerentanan Missing Authentication for Critical Function pada avaya scopia pathfinder 10 pts firmware, avaya scopia pathfinder 20 pts firmware. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackers to bypass the login page, access sensitive information, and reset user passwords via URL modification.

Rincian

Terbit di NVD

3 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://medium.com/%40rob_nes/avaya-scopia-pathfinder-broken-access-control-ac792e995bae exploit · advisory pihak ketiga