PT-2023-14638 · Temenos · Temenos Cwx

Whitebearvn · Publicado 2023-06-21 · Atualizado 2024-12-06 · CVE-2022-45287

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Temenos CWX version 8.5.6

Description The issue is related to an access control problem in the Registration.aspx file, allowing authenticated attackers to escalate privileges and execute arbitrary administrative commands.

Recommendations For Temenos CWX version 8.5.6, consider restricting access to the Registration.aspx file until a patch is available. As a temporary workaround, limit the privileges of authenticated users to prevent them from performing administrative commands.

Exploit

Correção

Identificadores relacionados

CVE-2022-45287

Produtos afetados

Temenos Cwx

Referências · 6

• 🔥 https://github.com/WhiteBearVN/CWX-Registration-Broken-Access-Control/blob/main/README.md · Exploit
• http://temenos.com · Nota
• http://cwx.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-45287 · Nota de Segurança
• https://t.me/cvenotify/103419 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-45287 · Aviso do Fabricante