CVE-2022-45175
Summary
| CVE | CVE-2022-45175 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-04-14 14:15:00 UTC |
|---|
| Updated | 2023-04-19 19:28:00 UTC |
|---|
| Description | An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/{ID-FILE]/c/{N]/{C]/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a target file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Liveboxcloud |
Vdesk |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| www.gruppotim.it/it/footer/red-team.html |
MISC |
www.gruppotim.it |
Exploit, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 330163 IBM AIX Multiple Security Vulnerabilities (kernel_advisory6)
