CVE-2022-24110 — MEDIUM (6.5)

Q: What is CVE-2022-24110?

CVE-2022-24110 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

Q: How severe is CVE-2022-24110?

CVE-2022-24110 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-24110?

Check the references section above for vendor advisories and patch information. Affected products include: Accellion Managed File Transfer.

Vulnerability Description

Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Accellion	Managed File Transfer	< 7.6

References

https://github.com/accellion/CVEs/blob/main/CVE-2022-24110.txtThird Party Advisory
https://www.kiteworks.com/platform/simple/managed-file-transfer/Product
https://github.com/accellion/CVEs/blob/main/CVE-2022-24110.txtThird Party Advisory
https://www.kiteworks.com/platform/simple/managed-file-transfer/Product

FAQ

What is CVE-2022-24110?

CVE-2022-24110 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

How severe is CVE-2022-24110?

CVE-2022-24110 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24110?

Check the references section above for vendor advisories and patch information. Affected products include: Accellion Managed File Transfer.