Phpipam CVE-2022-1224

MEDIUM

Improper Authorization (CWE-285)

2022-04-04 security@huntr.dev

Authentication Bypass Phpipam

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Apr 04, 2022 - 11:15 nvd

MEDIUM 6.5

DescriptionNVD

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

AnalysisAI

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-285. Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6. Affected products include: Phpipam. Version information: prior to 1.4.6..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Phpipam

View all

CVE-2022-41443 CRITICAL Act Now POC

phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.ph

CVE-2019-16696 CRITICAL Act Now POC

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used. Rated

CVE-2019-16695 CRITICAL Act Now POC

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used. Rat

CVE-2019-16694 CRITICAL Act Now POC

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used

CVE-2019-16693 CRITICAL Act Now POC

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. Rate

CVE-2019-16692 CRITICAL Act Now POC

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us

CVE-2018-1000869 CRITICAL Act Now POC

phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injec

CVE-2020-7988 HIGH This Week POC

An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. Rated high severity (CVSS 8.8), this vulnerabili

CVE-2024-10718 HIGH This Week POC

In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. Rated high se

CVE-2023-41580 HIGH This Week POC

Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-sear

CVE-2023-1211 HIGH This Week POC

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2. Rated high severity (CVSS 7.2), this vulnerability i

CVE-2024-41354 HIGH This Week POC

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php. Rated high severity (CVSS 7.1),

Same weakness CWE-285 – Improper Authorization

View all

CVE-2025-29927 CRITICAL POC

CVE-2016-5676 HIGH POC

CVE-2025-66301 CRITICAL POC

CVE-2023-32707 HIGH POC

CVE-2016-3352 HIGH

CVE-2025-29659 CRITICAL POC

CVE-2022-2595 CRITICAL POC

CVE-2026-30956 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2022-1224 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy