Vulnerabilities > CVE-2022-44009 - Missing Authorization vulnerability in Stackstorm 3.7.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |