{"api_version":"1","generated_at":"2026-07-23T14:30:42+00:00","cve":"CVE-2022-29950","urls":{"html":"https://cve.report/CVE-2022-29950","api":"https://cve.report/api/cve/CVE-2022-29950.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-29950","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-29950"},"summary":{"title":"CVE-2022-29950","description":"** DISPUTED ** Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2022-05-04 15:15:00","updated_at":"2023-11-07 03:46:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10","name":"https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10","refsource":"MISC","tags":[],"title":"PoC of Modification of Assumed-Immutable Data (MAID) vulnerability in Experian Hunter 1.16 via (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page (CVE-2022-29950) · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.experian.in/hunter","name":"https://www.experian.in/hunter","refsource":"MISC","tags":[],"title":"Hunter – Experian","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29950","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29950","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"29950","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"experian","cpe5":"hunter","cpe6":"1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2022-29950","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"** DISPUTED ** Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://www.experian.in/hunter","refsource":"MISC","name":"https://www.experian.in/hunter"},{"refsource":"MISC","name":"https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10","url":"https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10"}]}},"nvd":{"publishedDate":"2022-05-04 15:15:00","lastModifiedDate":"2023-11-07 03:46:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:experian:hunter:1.16:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}