Security Advisory

CVE-2022-48341

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-23 00:00:00
Last updated 2025-03-12 14:45:04
Assigner mitre
State PUBLISHED

Description

ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.