PT-2022-24347 · Ucms · Ucms

Published 2022-09-12 · Updated 2022-09-15 · CVE-2022-38297

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UCMS version 1.6.0

Description The issue is an authentication bypass vulnerability that can be exploited through cookie poisoning.

Recommendations For UCMS version 1.6.0, update to a version that contains a fix for this issue, as the current version is affected by an authentication bypass vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-565

Related Identifiers

CVE-2022-38297

Affected Products

Ucms

References · 4

• 🔥 https://github.com/tobysunyaya/UCMS_vulunerablities/blob/main/UCMS%20v1.6%20cookies%20poisoning%20attack%20vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-38297 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38297 · Vendor Advisory
• https://t.me/cibsecurity/49619 · Telegram Post