CVE-2022-25152criticalCWE-358

CVE-2022-25152: falha crítica em ITarian platform (SAAS / on-premise)

ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ITarian platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 1.9%
The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.35.37347.20040, a malicious actor (with a valid session token) can create a procedure, bypass approval, and execute the procedure. This results in the ability for any user with a valid session token to perform arbitrary code execution and full system take-over on all agents.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
ITarian · ITarian platform (SAAS / on-premise)