Vulnerabilities > CVE-2022-48341 - Unspecified vulnerability in Thingsboard 3.4.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |