Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-48365 Details

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips	CVE	Vendor Advisory
https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-8h83-chh2-fchp	CVE	Vendor Advisory
https://github.com/ezsystems/ezpublish-kernel/commit/957e67a08af2b3265753f9763943e8225ed779ab	CVE	Patch
https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-99r3-xmmq-7q7g	CVE	Vendor Advisory
https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips	[email protected]	Vendor Advisory
https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-8h83-chh2-fchp	[email protected]	Vendor Advisory
https://github.com/ezsystems/ezpublish-kernel/commit/957e67a08af2b3265753f9763943e8225ed779ab	[email protected]	Patch
https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-99r3-xmmq-7q7g	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-269	Improper Privilege Management	[email protected]
CWE-269	Improper Privilege Management	CISA-ADP

Product	Versions
ibexa digital experience platform	>= 3.3.0, < 3.3.28 >= 4.2.0, < 4.2.3
CPE cpe:2.3:a:ibexa:digital_experience_platform:::::::: Remediation No remediation found in references.
ibexa ez platform	>= 2.5.0, < 2.5.31
CPE cpe:2.3:a:ibexa:ez_platform:::::::: Remediation No remediation found in references.
ibexa ez platform kernel	>= 1.3.0, < 1.3.26 >= 7.5.0, < 7.5.30
CPE cpe:2.3:o:ibexa:ez_platform_kernel:::::::: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO