VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 21, 2024· Updated Jun 17, 2026

CVE-2022-45177

CVE-2022-45177

Description

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search={NAME]+{SURNAME] endpoint, and the /login endpoint. The web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Liveboxcloud/Vdesk
    cpe:2.3:a:liveboxcloud:vdesk:*:*:*:*:*:*:*:*
    Range: <=031
  • LIVEBOX Collaboration/vDeskdescription
  • LIVEBOX/vDeskllm-fuzzy
    Range: <=031

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.