CVE-2022-0611

HIGH8.8EPSS 0.29%

Improper Privilege Management in Snipe-IT

Published: 2/17/2022Modified: 2/16/2024

Description

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (4)