CVE-2022-34446CWE-285

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability

High · published February 10, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g., of role Monitoring) can exploit this issue and gain access to sensitive information, and modify the configuration.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00794 · 55.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-02-10T20:44Z
EPSS history
Timeline
  • 10 FEB 20:44Z
    PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability
    cvelistv5