CVE-2022-27192

HIGH

Asseco Dvs Avilys < 3.5.58 - Log Information Exposure

Title source: rule
STIX 2.1

Description

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0096
EPSS Percentile 76.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-532
Status published
Products (1)
asseco/dvs_avilys < 3.5.58
Published Mar 23, 2022
Tracked Since Feb 18, 2026