Access Control Issue in Revenue Collection System by Unknown Vendor
CVE-2022-46967

9.8CRITICAL

Key Information:

Vendor: Revenue Collection System Project
Status: Revenue Collection System
Vendor: CVE Published:; 26 January 2023

🔔 Create Revenue Collection System Project Vulnerability Alert

What is CVE-2022-46967?

The Revenue Collection System v1.0 suffers from an access control vulnerability that permits unauthorized users to access sensitive data within the /admin/DBbackup/ directory. This issue poses a significant security risk as it enables attackers to view confidential information without proper authentication, potentially leading to further exploitation.

References

https://packetstormsecurity.com/files/169916/Revenue-Coll...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 26, 2023
Vulnerability Reserved
Dec 12, 2022

CVE-2022-46967 Data

JSON