CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions.
References
Link Resource
https://www.hypr.com/security-advisories/ Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:hypr:hypr_server:*:*:*:*:*:*:*:*

Information

Published : 2022-07-19 03:15

Updated : 2022-07-27 07:23


NVD link : CVE-2022-2192

Mitre link : CVE-2022-2192

Products Affected
No products.
CWE
CWE-425

Direct Request ('Forced Browsing')