high8.8
CVE-2022-43438
The Administrator function of EasyTest has an Incorrect Authorization vulnerability.
Impact
The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy Test Project | Easy Test | from 17l18s before 22i26 |