CVE-2022-37435CWE-732
Apache ShenYu Admin Improper Privilege Management
published September 1, 2022
What it is
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01312 · 70.4th percentile
- Weakness
- CWE-732 · Incorrect Permission Assignment for Critical Resource
- Published
- 2022-09-01T14:00Z
EPSS history
Timeline