CVE-2022-24110

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-241115.3In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and pCVE-2022-241129.8An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of ApachCVE-2022-241137.8Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber ProtCVE-2022-241147.0Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home OffCVE-2022-241157.8Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect HomCVE-2022-241169.8Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0.CVE-2022-241179.8Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0,CVE-2022-241189.1Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration.CVE-2022-241199.8Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shellCVE-2022-24124.8The Better Tag Cloud WordPress plugin through 0.99.5 does not sanitise and escape some of its settings, which could allow high privilege useCVE-2022-241204.6Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.CVE-2022-241217.5SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information thr
CVE-2022-24110: Medium severity, CVSS 6.5 | Vulnix