← Database

CVE-2022-43438

HIGH CVSS: 8.8 Published: 2023-01-03 Modified: 2026-06-17

Description

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service.

Affected Platforms

Easy Test Project Easy Test

Weakness Type

CWE-863, CWE-863

References