CVE-2022-45183 | BDVDB-2026-188696 Detail

Description#

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ironmansoftware.com
https://docs.powershelluniversal.com/changelog
https://blog.ironmansoftware.com/psu-2022-11-cve/

Exploit#

No public exploit known

History#

Version 12022-11-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.