Vulnerability Description
RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privileged token via a public API endpoint (Incorrect Access Control). The token can be used to escalate privileges within the Digital Rebar system and grant full administrative access.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rackn | Digital Rebar | <= 4.6.14 |
References
- https://docs.rackn.io/en/latest/doc/security/cve_2022_46383.htmlVendor Advisory
- https://rackn.com/products/rebar/ProductVendor Advisory
- https://docs.rackn.io/en/latest/doc/security/cve_2022_46383.htmlVendor Advisory
- https://rackn.com/products/rebar/ProductVendor Advisory
FAQ
What is CVE-2022-46383?
CVE-2022-46383 is a vulnerability with a CVSS score of 9.8 (CRITICAL). RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privileged token via a public API endpoint (Incorrect Access Contro...
How severe is CVE-2022-46383?
CVE-2022-46383 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-46383?
Check the references section above for vendor advisories and patch information. Affected products include: Rackn Digital Rebar.