1. Home
  2. CVE Database
  3. CVE-2022-2664
HIGH · 7.3

CVE-2022-2664

A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcx_management/global_config_query of the compon...

Vulnerability Description

A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcx_management/global_config_query of the component POST Request Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. VDB-205614 is the identifier assigned to this vulnerability.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Private Cloud Management Platform ProjectPrivate Cloud Management Platform-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2022-2664?

CVE-2022-2664 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcx_management/global_config_query of the compon...

How severe is CVE-2022-2664?

CVE-2022-2664 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-2664?

Check the references section above for vendor advisories and patch information. Affected products include: Private Cloud Management Platform Project Private Cloud Management Platform.