Vulnerability in Liveboxcloud Vdesk
CVE-2022-45180
An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdesk_{DOMAIN]/export endpoint. A malicious user, authenticated to the product without any specific privilege, can use the API for exporting information about all users of the system (an operation intended to only be available to the system administrator).
EPSS: 0.007 (49.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Liveboxcloud Vdesk
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-45180?
- CVE-2022-45180 is a medium-severity vulnerability in Liveboxcloud Vdesk. CVSS score: 6.5/10. Published 2023-04-14.
- How severe is CVE-2022-45180?
- Medium severity. CVSS v3 base score is 6.5 out of 10.