VULNERABILITY INTELLIGENCE

CVE-2022-34446

CVSS score8.8 HIGH
EPSS probability0.79%
CISA KEVNot currently listed
Published2023-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g., of role Monitoring) can exploit this issue and gain access to sensitive information, and modify the configuration.

Weakness classification

  • CWE-285: Improper Authorization

Primary references