high8.8
CVE-2022-38351
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the up…
Impact
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Supremainc | Biostar 2 | Version 2.8.16 |
Weakness classification
References
- NVD record
- CVE.org record
- https://nobugescapes.com/blog/privilege-escalation-from-user-operator-to-system-administrator/
- https://nobugescapes.com/wp-content/uploads/2022/08/Part1.docx
- https://nobugescapes.com/blog/privilege-escalation-from-user-operator-to-system-administrator/
- https://nobugescapes.com/wp-content/uploads/2022/08/Part1.docx