| CVE | CVE-2022-48341 |
| CVE Title | |
| Published Date | 2023-02-23T06:15Z |
| Modified Date | 2023-03-03T02:33Z |
| CWE Type | NVD-CWE-Other |
| CVSS 3.x | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Description | ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter. |
| References | |
| By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
| Reference URL | https://thingsboard.io/docs/reference/releases/ |
| Reference Description | MISC https://thingsboard.io/docs/reference/releases/ |
| Reference URL | https://exchange.xforce.ibmcloud.com/vulnerabilities/238543 |
| Reference Description | MISC https://exchange.xforce.ibmcloud.com/vulnerabilities/238543 |
| Tags | Release Notes |
| Sources | NIST MITRE |
