CVE-2022-45183 - Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request

Back Back to CVE browser

HIGH

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request

Published Nov 14, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.82%

Description

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (4)

https://blog.ironmansoftware.com/psu-2022-11-cve/
Vendor Advisory
https://docs.powershelluniversal.com/changelog
Release NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48091
Advisory
https://ironmansoftware.com
Vendor Advisory

Link	Providers	Tags
https://blog.ironmansoftware.com/psu-2022-11-cve/		Vendor Advisory
https://docs.powershelluniversal.com/changelog		Release NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48091		Advisory
https://ironmansoftware.com		Vendor Advisory