Access Control Vulnerability in Ingredient Stock Management System by PacketStorm
CVE-2022-32310

9.8CRITICAL

Key Information:

Vendor

Ingredient Stock Management System Project

Status
Ingredient Stock Management System
Vendor
CVE Published:
5 July 2022

What is CVE-2022-32310?

An access control issue in Ingredient Stock Management System version 1.0 enables potential attackers to compromise user accounts. This vulnerability arises from the system's failure to adequately validate access rights when handling crafted POST requests directed at the /isms/classes/Users.php endpoint. As a result, malicious actors can exploit this weakness to gain unauthorized access, leading to account takeover and associated risks.

References

https://packetstormsecurity.com/files/167291/Ingredient-S...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.