What is CVE-2022-3496?

CVE-2022-3496 is a medium-severity vulnerability in Oretnom23 Human_resource_management_system, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2022-10-14.

How severe is CVE-2022-3496?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Privilege escalation in Oretnom23 Human_resource_management_system

CVE-2022-3496

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to imp…

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Oretnom23 Human_resource_management_system — versions 1.0
Sourcecodester Human Resource Management System — versions 1.0

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

cna@vuldb.com (Permissions Required, Third Party Advisory)

Frequently asked questions

What is CVE-2022-3496?: CVE-2022-3496 is a medium-severity vulnerability in Oretnom23 Human_resource_management_system, classified under Incorrect Privilege Assignment. CVSS score: 6.3/10. Published 2022-10-14.
How severe is CVE-2022-3496?: Medium severity. CVSS v3 base score is 6.3 out of 10.