CVE-2022-24637

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openwebanalytics:open_web_analytics:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-03-18 16:15

Updated : 2024-02-28 19:09


NVD link : CVE-2022-24637

Mitre link : CVE-2022-24637

CVE.ORG link : CVE-2022-24637


JSON object : View

Products Affected

openwebanalytics

  • open_web_analytics
CWE
CWE-269

Improper Privilege Management