PT-2022-13726 · Phpipam+1 · Phpipam+1

Faisalfs10X · Published 2016-12-29 · Updated 2023-08-02 · CVE-2022-1223

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpipam/phpipam versions prior to 1.4.6

Description The issue is related to improper access control, which can lead to incorrect authorization.

Recommendations For versions prior to 1.4.6, update to version 1.4.6 or later to resolve the issue.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

ALT-PU-2016-2512

CVE-2022-1223

Affected Products

Alt Linux

Phpipam

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1223.json · Exploit
• 🔥 https://huntr.dev/bounties/baec4c23-2466-4b13-b3c0-eaf1d000d4ab · Exploit
• https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1223 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1223 · Vendor Advisory
• https://t.me/cvenotify/28376 · Telegram Post
• https://t.me/cibsecurity/40085 · Telegram Post