high8.8
CVE-2022-45183
Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app…
Impact
Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ironmansoftware | Powershell Universal | from 2.0.0 before 2.12.6 from 3.0.0 before 3.4.7 from 3.5.0 before 3.5.3 |