PT-2022-15487 · Unknown · Cmpusermgr

Published 2022-04-07 · Updated 2022-05-12 · CVE-2022-22518

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CmpUserMgr (affected versions not specified)

Description A bug in the CmpUserMgr component can lead to only partially applied security policies, resulting in enabled, anonymous access to components that are part of the applied security policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-22518

Affected Products

Cmpusermgr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-22518 · Security Note
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17092&token=a556b1695843bb42084dc63d5bdf553ca02ea393&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22518 · Vendor Advisory
• https://t.me/cibsecurity/40316 · Telegram Post