[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyhG4PXUpS-kqoRJ74xFKIsWFhi4zQ2PQE59mzb5DCmk":3,"g5a-risk:CVE-2022-24385":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":53,"references":54,"referencesCount":64,"weaknesses":65,"weaknessesCount":53,"isActivelyExploited":74,"cisaInfo":27,"otxData":27,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2022-24385","What is CVE-2022-24385?","A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.","A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14...","2022-03-14T13:15:07.83","2022-03-19T01:10:50.36",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"csirt@divd.nl","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":39,"ConfidentialityImpact":40,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":41,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.00877,[44,44,44,44,44,44,44],"Medium",[48],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"smartertools","smartertrack","*","cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*",1,[55,61],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcsirt.divd.nl\u002FCVE-2022-24385","Divd",[59,60],"Third Party Advisory","VDB Entry",{"url":62,"source":57,"tags":63},"https:\u002F\u002Fcsirt.divd.nl\u002FDIVD-2021-00029",[59,60],2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-425","Direct Request ('Forced Browsing')","The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.","Web applications susceptible to direct request attacks often make the false assumption that such resources can only be reached through a given navigation path and so only apply authorization at certain points in the path.","Incomplete","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2022-24385? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-24385, a medium severity cyber security vulnerability from 2022. A Direct Object Access vulnerability in SmarterTools Smar...","CVE-2022-24385, CVE-2022-24385 vulnerability, CVE-2022-24385 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, smartertools security, smartertrack vulnerability","\u002Fwhat-is\u002Fcve-2022-24385",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-24385","Cybersecurity","CVE-2022-24385, CVE-2022-24385 vulnerability, CVE-2022-24385 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":27,"Negate":27,"Nodes":103},[104],{"Operator":105,"Negate":27,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":109,"VersionEndIncluding":27},"5D99A4E2-B4EA-484B-A591-F8D481FDE85A","100.0.8075",[],[],{"lastModified":11,"cacheTime":113,"version":37},1793387231849,{"score":115,"band":116,"action":117,"scoredAt":118},25,"Low","Monitor","2026-10-30T06:53:58.181514+00:00"]