CVE-2022-22518CWE-276

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.

Medium · published April 7, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
48.5
In the wild
Unconfirmed
What it is

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00610 · 48.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-04-07T18:21Z
EPSS history
Timeline
  • 07 APR 18:21Z
    A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
    cvelistv5