Missing Authorization Vulnerability Affects Hennessey Digital Attorney
CVE-2022-45832

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Attorney
Vendor
CVE Published:
19 June 2024

What is CVE-2022-45832?

A missing authorization issue exists in Hennessey Digital's Attorney application, allowing for unauthorized access to sensitive functionalities. This vulnerability enables certain users to manipulate or delete content without proper permissions, potentially compromising the integrity of the application and leading to unauthorized changes. It affects versions from n/a through 3, highlighting the need for users to apply necessary security measures to protect their digital assets.

Affected Version(s)

Attorney <= 3

References

https://patchstack.com/database/vulnerability/attorney/wo...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dave Jong (Patchstack)
.