CVE-2022-38184 — There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1

CVE-2022-38184

There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 PUBLISHED

Description (CNA)

There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated attacker to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected All through 10.8.1

CWE

CWE-284

References

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/

ADP enrichment

CVE

No English description supplied.

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/

CISA-ADP

No English description supplied.

No references supplied.