← Database

CVE-2022-22572

HIGH CVSS: 8.8 Published: 2022-04-11 Modified: 2026-06-17

Description

A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic Connect version < 1.40.1.

Affected Platforms

Ivanti Incapptic Connect

Weakness Type

NVD-CWE-noinfo

References