CVE-2022-45893 - Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie

Back Back to CVE browser

HIGH

Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie

Published Dec 25, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.79%

Description

Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48740
Advisory
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48740		Advisory
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 25, 2022

Updated Apr 14, 2025

Reserved Nov 25, 2022

Link CVE-2022-45893

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-45893

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 25, 2022

Updated Apr 14, 2025

Link EUVD-2022-48740

GitHub

No data