CVE-2022-1984

Published: Jul 19, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.

Affected (1)

Products: Hypr: Workforce Access

Hypr

1 product

Workforce Access

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hypr Workforce Access	Before 7.3.0

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://www.hypr.com/security-advisories/

Source: security@hypr.com

Vendor Advisory

https://www.hypr.com/security-advisories/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.