CVE-2022-43438
HIGHeasy_test 17l18s-22i26 - Authenticated Incorrect Authorization
Title source: llmDescription
The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service.
References (1)
Core 1
Core References
Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-6830-28746-1.html
Scores
CVSS v3
8.8
EPSS
0.0079
EPSS Percentile
51.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-863
Status
published
Products (1)
easy_test_project/easy_test
17l18s - 22i26
Published
Jan 03, 2023
Tracked Since
Feb 18, 2026