PT-2023-15445 · Isode · M-Link

CVE-2022-47634 · Publicado 2023-01-01 · Atualizado 2025-04-10

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Isode M-Link versions R16.2v1 through R17.0 before R17.0v24

Description The issue allows non-administrative users to access and manipulate archive data via certain HTTP endpoints.

Recommendations For versions R16.2v1 through R17.0 before R17.0v24, update to version R17.0v24 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2022-47634

Produtos afetados

M-Link

Referências · 6

• https://t.me/cibsecurity/55724 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-47634 · Nota de Segurança
• https://isode.com/support/security/advisory/m-link-incorrect-access-control-vulnerability-21-12-2022.html · Aviso do Fabricante
• https://t.me/cvenotify/118750 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-47634 · Aviso do Fabricante
• https://t.me/cvenotify/41086 · Publicação no Telegram