PT-2022-24480 · Unknown · Smartvista Cardgen

Tf1T + 1 · Published 2022-09-09 · Updated 2022-09-14 · CVE-2022-38613

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmartVista Cardgen version 3.28.0

Description A Path Traversal issue allows authenticated attackers to read arbitrary files in the system.

Recommendations For SmartVista Cardgen version 3.28.0, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-38613

Affected Products

Smartvista Cardgen

References · 6

• 🔥 https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/path-traversal-in-smartvista-cardgen-version-3.28.0-cve-2022-38613 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-38613 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38613 · Vendor Advisory
• https://t.me/cibsecurity/49547 · Telegram Post
• http://smartvista.com · Note
• http://bpcbt.com · Note