CVE-2022-38168

n/a / n/a PUBLISHED

Description (CNA)

Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackers to bypass the login page, access sensitive information, and reset user passwords via URL modification.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://medium.com/%40rob_nes/avaya-scopia-pathfinder-broken-access-control-ac792e995bae

ADP enrichment

CVE

No English description supplied.

https://medium.com/%40rob_nes/avaya-scopia-pathfinder-broken-access-control-ac792e995bae

CISA-ADP

No English description supplied.

No references supplied.