CVE-2022-32260CWE-286

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)

Medium · published June 14, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00765 · 55.0th percentile
Weakness
CWE-286 · Incorrect User Management
Published
2022-06-14T09:22Z
EPSS history
Timeline
  • 14 JUN 09:22Z
    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
    cvelistv5