CVE-2022-27968

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2022-09-08

Last modified

2024-08-03

Affected products

• Cynet 360 (Cynet)

References

• https://www.cynet.com/platform/
• https://www.srlabs.de/bites/edr-security