CVE-2022-37774
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A broken access control vulnerability was found in Maarch RM 2.8.3. When previewing documents (PDF, email) from an archive, the application generates a URL containing an MD5 hash of the file, which is accessible without authentication.
Risk Assessment
An unauthorized person can access confidential documents stored in the archive, leading to data leakage and confidentiality breach.
Recommendation
Immediately update Maarch RM to the latest version and enforce authentication for all temporary resources.
Other vulnerabilities in Maarch RM
See all- CVE-2022-37772High
The vulnerability in Maarch RM 2.8.3 is due to improper restriction of excessive authentication attempts, manifested by overly verbose responses from the application. An unauthenticated remote attacker could exploit this flaw to perform brute-force attacks on user accounts.
- CVE-2022-37773Medium
An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.
Original NVD description (English source)
There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document's URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS