CVE-2022-2661CWE-285

Sequi PortBloque S Improper Authorization

Critical · published August 16, 2022

CVSS v3.1
9.9
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

🚨 A low-privileged user can elevate themselves to admin status—it's like a diner sneaking into the kitchen to change the menu! 🔥 Picture this: a restaurant where the waiter can waltz into the kitchen and start making orders. This vulnerability lets a low-ranking user perform administrative functions, which is a recipe for chaos! An attacker could easily manipulate the system, granting themselves access to sensitive data, altering configurations, or even causing serious disruptions. This could lead to unauthorized changes that compromise the entire system's integrity, making it an absolute nightmare for management!

Put simply

Picture this: a restaurant where the waiter can waltz into the kitchen and start making orders. This vulnerability lets a low-ranking user perform administrative functions, which is a recipe for chaos! This improper authorization flaw in Sequi PortBloque S allows low-privileged users to execute requests as if they were administrators. Essentially, the server fails to properly verify the user's access rights, opening the door for trouble!

What to do

An attacker could easily manipulate the system, granting themselves access to sensitive data, altering configurations, or even causing serious disruptions. This could lead to unauthorized changes that compromise the entire system's integrity, making it an absolute nightmare for management! Immediately patch Sequi PortBloque S to the latest version to close this vulnerability. Review user roles and permissions to ensure that no low-privileged accounts can perform admin tasks. Regularly audit your authorization processes to catch any sneaky gaps in security! You've got this! Tackle these steps, and you'll have your system fortified in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00841 · 57.5th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-08-16T19:52Z
EPSS history
Timeline
  • 16 AUG 19:52Z
    Sequi PortBloque S Improper Authorization
    cvelistv5