CVE-2022-46997

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package

Critical · published December 14, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

🚨 A backdoor in Passhunt is like leaving the front door wide open for intruders! This vulnerability could let attackers execute code and gain access to sensitive user data. 🔥 Think of it as a sneaky delivery driver who not only knows your address but also has the keys to your house. By exploiting this backdoor, attackers can access confidential information and even your digital currency keys without you ever knowing! If this vulnerability is exploited, attackers could gain control of systems, read sensitive user data, and escalate privileges, leading to potentially catastrophic data breaches. Imagine your entire digital life being exposed — that's the reality here!

Put simply

Think of it as a sneaky delivery driver who not only knows your address but also has the keys to your house. By exploiting this backdoor, attackers can access confidential information and even your digital currency keys without you ever knowing! CVE-2022-46997 allows attackers to execute arbitrary code via the request package in Passhunt, effectively creating a backdoor that grants unauthorized access to sensitive user information and privileges.

What to do

If this vulnerability is exploited, attackers could gain control of systems, read sensitive user data, and escalate privileges, leading to potentially catastrophic data breaches. Imagine your entire digital life being exposed — that's the reality here! To protect against this, immediately upgrade to the patched version of Passhunt. Audit your systems to ensure no unauthorized access has occurred, and consider implementing additional security measures like monitoring for unusual activity. Don't wait! You've got this! Follow these steps, and you'll be on your way to securing your systems in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01238 · 68.9th percentile
Published
2022-12-14T00:00Z
EPSS history
Timeline
  • 14 DEC 00:00Z
    Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package
    cvelistv5