CVE Catalog

CVE-2022-36179

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.93%

56th percentile - higher than 56% of all known CVEs

Summary

Fusiondirectory 1.3 suffers from improper session handling. This could allow an attacker to hijack user sessions or bypass authentication mechanisms.

Risk Assessment

The risk for the organization is the potential for unauthorized access to the directory management system, which could lead to data leakage or configuration integrity compromise.

Recommendation

It is recommended to immediately update Fusiondirectory to the latest available version that fixes this vulnerability. Also review and strengthen session management configuration.

Original NVD description (English source)

Fusiondirectory 1.3 suffers from Improper Session Handling.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS