MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion.
References
Link | Resource |
---|---|
http://example.com:8082/#/login | Broken Link Third Party Advisory |
https://github.com/prismbreak/vulnerabilities/issues/2 | Exploit Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-08-19T20:30:49
Updated: 2022-08-19T20:30:49
Reserved: 2022-07-18T00:00:00
Link: CVE-2022-36170
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-08-19T21:15:08.673
Modified: 2022-08-23T18:19:33.180
Link: CVE-2022-36170
JSON object: View
Redhat Information
No data.
CWE