CVE-2022-31887 | BDVDB-2026-179170 Detail

Description#

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://marvalglobal.com/
https://drive.google.com/drive/folders/12nb9KvckzhUNv4RtjlaeZi8QeFqwvkMX?usp=sharing
https://cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/0-click-account-takeover

Exploit#

No public exploit known

History#

Version 12022-06-28Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.