CVE-2022-45184

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a…

published November 14, 2022

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02077 · 81.3th percentile
Published
2022-11-14T00:00Z
EPSS history
Timeline
  • 14 NOV 00:00Z
    The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a…
    cvelistv5