Lucene search
PRIOn knowledge basePRION:CVE-2022-37774HistoryNov 23, 2022 - 12:15 a.m.
Improper access control
2022-11-2300:15:00
PRIOn knowledge base
www.prio-n.com
3
access control
maarch rm 2.8.3
vulnerability
url
authentication
hash
document access
There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document’s URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.
Related
nvd
nvd
CVE-2022-37774
2022-11-23 00:15:10
cve
cve
CVE-2022-37774
2022-11-23 00:15:10
cnvd
cnvd
Maarch RM Information Disclosure Vulnerability
2022-11-25 00:00:00
cvelist
cvelist
CVE-2022-37774
2022-11-22 00:00:00