CVE-2022-22572

A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality

published April 11, 2022

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic Connect version < 1.40.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02085 · 81.4th percentile
Published
2022-04-11T19:38Z
EPSS history
Timeline
  • 11 APR 19:38Z
    A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality
    cvelistv5