Back to Database
Status published
Unknown
CVE-2022-45893
Planet eStream before 6.72.10.07 allows a low-privileged user to gain...
Vulnerability Description
Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45893
Credits & Attribution
No credits recorded in the NVD database.
More from planetestream
View All →CVE-2022-45896
Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files:...
Unknown
0
CVE-2022-45895
Planet eStream before 6.72.10.07 discloses sensitive information, related to the...
Unknown
0
CVE-2022-45894
GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal...
Unknown
0
CVE-2022-45892
In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS)...
Unknown
0
CVE-2022-45891
Planet eStream before 6.72.10.07 allows attackers to call restricted functions,...
Unknown
0
Affected Vendor
planetestream
View all reports →Affected Software
planet estream
Vulnerable Versions:
0
Timeline
Official Publish:
December 25th, 2022
Last Modified:
April 14th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.