Missing Authorization Vulnerability Affects Hennessey Digital Attorney
CVE-2022-45832
6.5MEDIUM
Summary
A missing authorization issue exists in Hennessey Digital's Attorney application, allowing for unauthorized access to sensitive functionalities. This vulnerability enables certain users to manipulate or delete content without proper permissions, potentially compromising the integrity of the application and leading to unauthorized changes. It affects versions from n/a through 3, highlighting the need for users to apply necessary security measures to protect their digital assets.
Affected Version(s)
Attorney <= 3
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dave Jong (Patchstack)