Vulnerability Description
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers.
CVSS Score
5.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cynet | Cynet 360 | < 4.5.6 |
References
- https://www.cynet.com/platform/Vendor Advisory
- https://www.srlabs.de/bites/edr-securityExploitThird Party Advisory
- https://www.cynet.com/platform/Vendor Advisory
- https://www.srlabs.de/bites/edr-securityExploitThird Party Advisory
FAQ
What is CVE-2022-27969?
CVE-2022-27969 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers.
How severe is CVE-2022-27969?
CVE-2022-27969 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-27969?
Check the references section above for vendor advisories and patch information. Affected products include: Cynet Cynet 360.