CVEvulnerability
CVE-2022-27192
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-532
Description
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.
Affected configurations
• asseco dvs avilys (< 3.5.58)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.md Third Party Advisory
- https://lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/ Product, Vendor Advisory
- https://github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.md Third Party Advisory
- https://lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/ Product, Vendor Advisory