PT-2022-22638 · Unknown · Teamplus Pro

Rayhong · Published 2022-08-02 · Updated 2022-08-08 · CVE-2022-35220

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Teamplus Pro (affected versions not specified)

Description The issue is related to an 'allocation of resource without limits or throttling' problem in the community discussion function. A remote attacker with general user privileges can post a thread with large content, causing the receiving client device to allocate excessive memory. This leads to the abnormal termination of the Teamplus Pro application on the client's device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-35220

Affected Products

Teamplus Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-35220 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35220 · Vendor Advisory
• https://t.me/cibsecurity/47422 · Telegram Post
• https://twcert.org.tw/tw/cp-132-6359-f5d1c-1.html · Note