Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-4779

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

elvexys StreamX

Default version status: unaffected

  • 6.02.01 to ≤ 6.04.34affected

References