Vulnerability Description
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Asseco | Dvs Avilys | < 3.5.58 |
Related Weaknesses (CWE)
References
- https://github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.mdThird Party Advisory
- https://lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/ProductVendor Advisory
- https://github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.mdThird Party Advisory
- https://lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/ProductVendor Advisory
FAQ
What is CVE-2022-27192?
CVE-2022-27192 is a vulnerability with a CVSS score of 7.5 (HIGH). The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading adm...
How severe is CVE-2022-27192?
CVE-2022-27192 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-27192?
Check the references section above for vendor advisories and patch information. Affected products include: Asseco Dvs Avilys.