PT-2022-23442 · Cskefu · Cskefu

Milkii0 · Published 2022-08-26 · Updated 2022-09-01 · CVE-2022-36521

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions cskefu version 7.0.1

Description The issue is related to insecure permissions, allowing unauthenticated attackers to add administrator accounts arbitrarily.

Recommendations For cskefu version 7.0.1, update to a version that addresses the insecure permissions issue to prevent unauthenticated attackers from adding administrator accounts.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-36521

Affected Products

Cskefu

References · 5

• 🔥 https://github.com/chatopera/cskefu/issues/724 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-36521 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36521 · Vendor Advisory
• https://t.me/cibsecurity/48861 · Telegram Post
• https://t.me/cvenotify/35203 · Telegram Post