CVE-2022-30670

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.

CVSS v3 8.8 HIGH
CVSS v2.0 9.0 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:adobe:robohelp_server::::::::
	cpe:2.3:a:adobe:robohelp_server:11:-::::::
	cpe:2.3:a:adobe:robohelp_server:11:update1::::::
	cpe:2.3:a:adobe:robohelp_server:11:update2::::::
	cpe:2.3:a:adobe:robohelp_server:11:update3::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:47

Type	Values Removed	Values Added
CVSS	v2 : ~~9.0~~ v3 : ~~8.8~~	v2 : 9.0 v3 : unknown

Information

Published : 2022-06-16 17:15

Updated : 2024-02-28 19:09

NVD link : CVE-2022-30670

Mitre link : CVE-2022-30670

CVE.ORG link : CVE-2022-30670

JSON object : View

Products Affected

microsoft

windows

adobe

robohelp_server

CWE

CWE-285

Improper Authorization

{"id": "CVE-2022-30670", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "psirt@adobe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Secondary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-06-16T17:15:08.423", "references": [{"url": "https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html", "tags": ["Vendor Advisory"], "source": "psirt@adobe.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "psirt@adobe.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "RoboHelp Server versiones anteriores a la actualizaci\u00f3n 3 de RHS 11, est\u00e1n afectadas por una vulnerabilidad de Autorizaci\u00f3n Inapropiada que podr\u00eda conllevar a una elevaci\u00f3n de privilegios. Un atacante autenticado podr\u00eda aprovechar esta vulnerabilidad para obtener privilegios de administrador completos. No es requerida una interacci\u00f3n del usuario para explotar este problema"}], "lastModified": "2023-11-07T03:47:21.997", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:robohelp_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CFA07D7-BC9B-49AB-A695-25D72C076A8B", "versionEndExcluding": "11"}, {"criteria": "cpe:2.3:a:adobe:robohelp_server:11:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFAFE733-A7F2-45F9-BBD5-CDA4B8A200C6"}, {"criteria": "cpe:2.3:a:adobe:robohelp_server:11:update1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEF1C8F3-963F-4DF4-966B-AE7816D9BF88"}, {"criteria": "cpe:2.3:a:adobe:robohelp_server:11:update2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54264AA5-08D5-4CB4-A341-FFDE58231CEC"}, {"criteria": "cpe:2.3:a:adobe:robohelp_server:11:update3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A777F4-C3D0-4630-8DC4-F8AA2087512D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@adobe.com"}