by Kastro
Paper/Archive/CVE-2022-32272

CVE-2022-32272

mitre — OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorre…

EPSS 10%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.5.955 × 2019.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refopswat.comrefdocs.opswat.com/mdcore/release-notesrefdocs.opswat.com/mdemail/release-notesrefdocs.opswat.com/mdicap/release-notesrefdocs.opswat.com/mdicap/release-notes/version-4-12-1refdocs.opswat.com/mdemail/release-notes/version-5-6-1refpacketstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Privilege-Escalation.html