CVE-2022-21934CWE-620

Metasys Unverified Password Change

High · published May 6, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00960 · 61.2th percentile
Weakness
CWE-620 · Unverified Password Change
Published
2022-05-06T15:55Z
EPSS history
Timeline
  • 06 MAY 15:55Z
    Metasys Unverified Password Change
    cvelistv5