What is CVE-2022-3496?

CVE-2022-3496 is a medium-severity vulnerability in Oretnom23 Human Resource Management System, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2022-10-14.

How severe is CVE-2022-3496?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Privilege escalation in Oretnom23 Human Resource Management System

CVE-2022-3496

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability.

EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Oretnom23 Human_resource_management_system — versions 1.0
Sourcecodester Human Resource Management System — versions 1.0

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

cna@vuldb.com (Permissions Required, Third Party Advisory)

Frequently asked questions

What is CVE-2022-3496?: CVE-2022-3496 is a medium-severity vulnerability in Oretnom23 Human Resource Management System, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2022-10-14.
How severe is CVE-2022-3496?: Medium severity. CVSS v3 base score is 6.3 out of 10.