cbcvebase.

General Bytes Crypto Application Server vulnerabilities

1 known vulnerability affecting general_bytes/crypto_application_server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-4980P1CRITICALCVSS 9.3Exploited≥ 20201208, < 20220725.22≥ 20201208, < 20220531.382025-09-19
CVE-2022-4980 [CRITICAL] CWE-306 CVE-2022-4980: General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 ( General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation / first-admin creation page and create a new administra
nvd
General Bytes Crypto Application Server vulnerabilities | cvebase