PatchSiren

Çekino Bilgi Teknolojileri CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Çekino Bilgi Teknolojileri CVE published 2022-09-21

CVE-2022-2265

An unauthenticated path traversal vulnerability in the Identity and Directory Management System developed by Çekino Bilgi Teknolojileri allows remote attackers to read arbitrary files on affected systems. The vulnerability exists in versions prior to 2.1.25 and has been assigned a CVSS 3.1 score of 7.5 (HIGH severity). The issue was publicly disclosed on September 21, 2022, and subsequently modified in th [truncated]