CVE-2022-44009

n/a / n/a PUBLISHED

Description (CNA)

Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://stackstorm.com/2022/12/v3-8-0-released/

ADP enrichment

CVE

No English description supplied.

https://stackstorm.com/2022/12/v3-8-0-released/

CISA-ADP

No English description supplied.

No references supplied.