CVE-2022-48365

Description

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

Affected Platforms

Weakness Type

CWE-269, CWE-269

References

• https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulne…
• https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-8h83-chh…
• https://github.com/ezsystems/ezpublish-kernel/commit/957e67a08af2b3265753f976394…
• https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-99r3-xmmq…
• https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulne…
• https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-8h83-chh…