CVE-2022-30290

In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint

published July 5, 2022

CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their registered e-mail address as well as their API key, even though such action is not possible through the interface, legitimately.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00982 · 62.0th percentile
Published
2022-07-05T12:43Z
EPSS history
Timeline
  • 05 JUL 12:43Z
    In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint
    cvelistv5