Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2022-39057

Changing Information Technology Inc. RAVA certificate validation system - Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Changing Information Technology Inc. RAVA certificate validation system

  • 3affected

References