← Database

CVE-2022-42175

HIGH CVSS: 8.8 Published: 2023-07-05 Modified: 2026-07-09

Description

Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization.

Affected Platforms

Soluslabs Solusvm

Weakness Type

CWE-639

References