CVE-2022-2265

HIGH

Identity And Directory Management System < 2.1.25 - Path Traversal

Title source: rule
STIX 2.1

Description

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

References (1)

Scores

CVSS v3 7.5
EPSS 0.0069
EPSS Percentile 71.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22 CWE-35
Status published
Products (1)
identity_and_directory_management_system_project/identity_and_directory_management_system < 2.1.25
Published Sep 21, 2022
Tracked Since Feb 18, 2026