Incorrect Privilege Assignment

CVE-2022-1225

Medium

6.5/10

Summary

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: NONE

CWE-266 - Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References

Advisory Timeline

Published Apr 04, 2022