Marval Msm vulnerabilities

2 known vulnerabilities in Marval Msm from Marvalglobal. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Marval Msm: Insufficiently Protected Credentials

  CVE-2022-31887Jun 28, 2022MarvalglobalEPSS 1.59%

  Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

• 8.8 High severity

  Marval Msm: Authorization Bypass Through User-Controlled Key

  CVE-2022-31883Jun 28, 2022Marvalglobal

  Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.