CVE Feed

    Dashboard / CVE / CVE-2022-4962

    CVE-2022-4962

    A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. VDB-250430 is the identifier assigned to this vulnerability. NOTE: The maintainer explains that user data information like user id, name, and email are not sensitive.

    Published:Jan 12, 2024
    Last Modified:Feb 13, 2025
    EPS:Jan 12, 2024
    EPSS Score:0.00058
    CVSS Score:4.3

    Affected Products

    Vendor
    Apolloconfig
    Product
    Apollo

    Exploits

    https://github.com/apolloconfig/apollo/issues/4684https://github.com/apolloconfig/apollo/issues/4684

    Common Weakness Enumeration

    CWE-285 Improper Authorization

    Related CVEs

    CVE-2025-32781 (CVSS 6.5) — Apollo is a reliable configuration management system suitable for microservice configuration management scenar…
    CVE-2026-59954 (CVSS 7.5) — Apollo is a reliable configuration management system suitable for microservice configuration management scenar…
    CVE-2026-59955 (CVSS 7.5) — Apollo is a reliable configuration management system suitable for microservice configuration management scenar…
    CVE-2024-43397 (CVSS 4.3) — Apollo is a configuration management system. A vulnerability exists in the synchronization configuration featu…
    CVE-2024-42662 (CVSS 7.5) — An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted…
    CVE-2023-25570 (CVSS 7.5) — Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if us…
    CVE-2023-25569 (CVSS 5.7) — Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a specia…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High