CVE-2022-3501
Information exposure of template content due to missing check of permissions
Article template contents with sensitive data could be accessed from agents without permissions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Information exposure of template content due to missing check of permissions
Article template contents with sensitive data could be accessed from agents without permissions.
- Record
CVE-2022-3501- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2022-42872
Article template contents with sensitive data could be accessed from agents without permissions.
- Record
EUVD-2022-42872- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-v7r4-jv98-9mhx
Article template contents with sensitive data could be accessed from agents without permissions.
Article template contents with sensitive data could be accessed from agents without permissions.
- Record
GHSA-v7r4-jv98-9mhx- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-862
- Updated
- 2026-11-02
NVD
Article template contents with sensitive data could be accessed from agents without permissions.
- Record
CVE-2022-3501- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200, CWE-862
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-3501
Article template contents with sensitive data could be accessed from agents without permissions.
- Record
UBUNTU-CVE-2022-3501- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
znunyUbuntu:24.04:LTS |
All versions, plus listed versions 6.5.3-16.5.4-16.5.5-16.5.6-1 |
None known |
znunyUbuntu:25.10 |
All versions, plus listed versions 6.5.14-16.5.15-2 |
None known |
znunyUbuntu:26.10 |
All versions, plus listed versions 6.5.18-16.5.20-16.5.21-16.5.22-16.5.23-1 |
None known |
znunyUbuntu:26.04:LTS |
All versions, plus listed versions 6.5.15-26.5.18-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-3501 is a low vulnerability (CVSS 3.5) in Accessing Template Content Without Permissions Otrs, published October 17, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.