← Database

CVE-2022-1401

MEDIUM CVSS: 6.9 Published: 2022-08-17 Modified: 2026-06-17

Description

Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive server files with root permissions. This issue affects: Device42 CMDB versions prior to 18.01.00.

Affected Platforms

Device42 Cmdb

Weakness Type

CWE-863, CWE-863

References