What is CVE-2022-46382?

CVE-2022-46382 is a high-severity vulnerability in Rackn Digital Rebar, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2022-12-06.

How severe is CVE-2022-46382?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Rackn Digital Rebar

CVE-2022-46382

RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has Insecure Permissions. After signing into Digital Rebar, users are issued authentication tokens tied to their account to perform actions within Digital Rebar. During the validation process of these tokens, Digital Rebar did not check if the user account still exists. Deleted Digital Rebar users could still use their tokens to perform actions within Digital Rebar.

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rackn Digital_rebar
N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (Product)

Frequently asked questions

What is CVE-2022-46382?: CVE-2022-46382 is a high-severity vulnerability in Rackn Digital Rebar, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2022-12-06.
How severe is CVE-2022-46382?: High severity. CVSS v3 base score is 8.8 out of 10.