What is CVE-2022-25152?

CVE-2022-25152 is a critical-severity vulnerability in Itarian Platform (Saas / On-premise), classified under CWE-358. CVSS score: 9.9/10. Published 2022-06-09.

How severe is CVE-2022-25152?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Vulnerability in Itarian Platform (Saas / On-premise)

CVE-2022-25152

The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any…

EPSS: 0.017 (73.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Itarian Platform (Saas / On-premise) — versions any version
Itarian On-premise
Itarian Saas_service_desk

Weakness classification (CWE)

CWE-358

References

csirt@divd.nl (x_refsource_CONFIRM, related, Third Party Advisory)
csirt@divd.nl (x_refsource_CONFIRM, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2022-25152?: CVE-2022-25152 is a critical-severity vulnerability in Itarian Platform (Saas / On-premise), classified under CWE-358. CVSS score: 9.9/10. Published 2022-06-09.
How severe is CVE-2022-25152?: Critical severity. CVSS v3 base score is 9.9 out of 10.