CVE-2022-32282CWE-836

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364

High · published August 22, 2022

CVSS v3.0
7.2
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01852 · 79.0th percentile
Weakness
CWE-836 · Use of Password Hash Instead of Password for Authentication
Published
2022-08-22T18:25Z
EPSS history
Timeline
  • 22 AUG 18:25Z
    An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364
    cvelistv5