critical9.8Public exploit code
CVE-2022-32272
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, res…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OPSWAT Metadefender Core - Privilege Escalation2023-03-28 · webapps · multiple
Impact
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opswat | Metadefender | before 5.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Privilege-Escalation.html
- https://docs.opswat.com/mdcore/release-notes
- https://docs.opswat.com/mdemail/release-notes
- https://docs.opswat.com/mdemail/release-notes/version-5-6-1
- https://docs.opswat.com/mdicap/release-notes
- https://docs.opswat.com/mdicap/release-notes/version-4-12-1
- https://opswat.com
- http://packetstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Privilege-Escalation.html
- https://docs.opswat.com/mdcore/release-notes
- https://docs.opswat.com/mdemail/release-notes
- https://docs.opswat.com/mdemail/release-notes/version-5-6-1
- https://docs.opswat.com/mdicap/release-notes
- https://docs.opswat.com/mdicap/release-notes/version-4-12-1
- https://opswat.com