CVE-2022-45184 | BDVDB-2026-188697 Detail

Description#

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ironmansoftware.com
https://docs.powershelluniversal.com/changelog
https://blog.ironmansoftware.com/psu-2022-11-cve/

Exploit#

No public exploit known

History#

Version 12022-11-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.