CVE-2022-28780CWE-284

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather…

Medium · published May 3, 2022

CVSS v3.1
5.0
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00095 · 0.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-05-03T19:39Z
EPSS history
Timeline
  • 03 MAY 19:39Z
    Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather…
    cvelistv5