PT-2022-13015 · Snipe-It · Snipe-It

Haxatron · Published 2022-01-12 · Updated 2023-06-29 · CVE-2022-0179

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions snipe-it (affected versions not specified)

Description The issue is related to Missing Authorization and Improper Access Control, which may allow unauthorized access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Incorrect Default Permissions

Missing Authorization

Weakness Enumeration

CWE-284

CWE-276

CWE-862

Related Identifiers

CVE-2022-0179

GHSA-W3V3-CXQ5-9VR4

Affected Products

Snipe-It

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0179.json · Exploit
• 🔥 https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7 · Exploit
• https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e · Patch
• https://osv.dev/vulnerability/CVE-2022-0179 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w3v3-cxq5-9vr4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0179 · Security Note
• https://github.com/snipe/snipe-it · Note
• https://github.com/snipe/snipe-it/pull/10498 · Note
• https://t.me/cvenotify/53287 · Telegram Post
• https://t.me/cibsecurity/35319 · Telegram Post
• https://t.me/cvenotify/25275 · Telegram Post