PT-2022-19930 · Experian · Experian Hunter

Voidager88 · Published 2022-05-04 · Updated 2024-08-03 · CVE-2022-29950

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Experian Hunter version 1.16

Description The issue allows remote authenticated users to modify assumed-immutable elements. This can be achieved via the rule name parameter to the "Rules page" or the subrule name or categories name parameter to the "Subrules page". The vendor disputes this issue because version 1.16 has never existed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-29950

Affected Products

Experian Hunter

References · 8

• 🔥 https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10 · Exploit
• https://osv.dev/vulnerability/CVE-2022-29950 · Vendor Advisory
• https://experian.in/hunter · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29950 · Security Note
• https://t.me/cvenotify/80144 · Telegram Post
• https://t.me/cibsecurity/41923 · Telegram Post
• https://t.me/cvenotify/30365 · Telegram Post
• https://t.me/cvenotify/88711 · Telegram Post