PT-2023-15893 · Unknown · Forged Alliance Forever

CVE-2022-4879 · Publicado 2023-01-06 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Forged Alliance Forever versions up to 3746

Description A critical issue was found in the Vote Handler component, leading to improper authorization due to manipulation of an unknown functionality. Upgrading to version 3747 addresses this issue.

Recommendations For Forged Alliance Forever versions up to 3746, upgrade to version 3747 to resolve the issue. As a temporary workaround, consider restricting access to the Vote Handler component until the upgrade is applied.

Exploit

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2022-4879

Produtos afetados

Forged Alliance Forever

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4879.json · Exploit
• https://github.com/FAForever/fa/releases/tag/3747 · Correção
• https://github.com/FAForever/fa/commit/6880971bd3d73d942384aff62d53058c206ce644 · Correção
• https://github.com/FAForever/fa/pull/4398 · Correção
• https://osv.dev/vulnerability/CVE-2022-4879 · Aviso do Fabricante
• https://vuldb.com/?ctiid.217555 · Nota
• https://t.me/cvenotify/60147 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-4879 · Nota de Segurança
• https://t.me/cvenotify/41384 · Publicação no Telegram
• https://t.me/cvenotify/41389 · Publicação no Telegram
• https://vuldb.com/?id.217555 · Nota