Security Advisory

CVE-2022-46308

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-02 00:00:00

Last updated 2025-01-09 14:39:00

Assigner twcert

State PUBLISHED

Description

SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilege can exploit this vulnerability to call privileged APIs to access, modify and delete user information.

← Browse all CVEs View on cve.org ↗