PT-2023-13612 · Unknown · Agevolt Portal

CVE-2022-38485 · Publicado 2023-10-23 · Atualizado 2024-10-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AgeVolt Portal versions prior to 0.1

Description A directory traversal issue exists that leads to Information Disclosure. A remote authenticated attacker could leverage this issue to read files from any location on the target operating system with web server privileges.

Recommendations For versions prior to 0.1, update to version 0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories on the target operating system to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2022-38485

Produtos afetados

Agevolt Portal

Referências · 6

• 🔥 https://citadelo.com/download/CVE-2022-38485.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2022-38485 · Aviso do Fabricante
• https://t.me/cibsecurity/72838 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1716654978880647431 · Publicação no Twitter
• https://t.me/cvenotify/99653 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-38485 · Nota de Segurança