CVE-2022-32272

Description

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

Affected Platforms

Weakness Type

CWE-269

References

• http://packetstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Priv…
• https://docs.opswat.com/mdcore/release-notes
• https://docs.opswat.com/mdemail/release-notes
• https://docs.opswat.com/mdemail/release-notes/version-5-6-1
• https://docs.opswat.com/mdicap/release-notes
• https://docs.opswat.com/mdicap/release-notes/version-4-12-1