CVE-2022-46299

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-691

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-46305.3Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.CVE-2022-463005.5Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.CVE-2022-463014.4Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.CVE-2022-463028.8Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy confi CVE-2022-463037.5Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with CVE-2022-463048.8ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated r CVE-2022-463056.5ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass CVE-2022-463067.8ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path CVE-2022-463078.8SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege c CVE-2022-463088.8SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privil CVE-2022-463096.5Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability CVE-2022-46316.1A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The