Vulnerabilities > CVE-2022-42175 - Authorization Bypass Through User-Controlled Key vulnerability in Soluslabs Solusvm 4.1.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |