CVE-2022-25626

Medium

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to…

symantec·NVD-CWE-noinfo·Published 2022-12-16

CVSS

5.3

EPSS

0.01

KEV

Exploits

cve.orgen

195 chars

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.

NVDen

195 chars

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.

Un usuario no autenticado puede acceder a las URL de páginas específicas de la consola de administración de Identity Manager. Sin embargo, el sistema no permite al usuario realizar tareas del lado del servidor sin una sesión web válida.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N