PT-2022-23242 · Unknown · Mapgis Igserver

Published 2022-08-19 · Updated 2022-08-22 · CVE-2022-36171

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions MapGIS IGServer version 10.5.6.11

Description The issue allows for arbitrary file deletion.

Recommendations For MapGIS IGServer version 10.5.6.11, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2022-36171

Affected Products

Mapgis Igserver

References · 3

• 🔥 https://github.com/prismbreak/vulnerabilities/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-36171 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36171 · Vendor Advisory