CVE-2022-1984
Medium
Description
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.
SeverityMedium
CVSS4.5
Exploit probability—
ProductHypr Workforce Access
PublishedJul 19, 2022
First seenJul 19, 2022
Weakness typeCWE-502Deserialization of untrusted data
How to fix
Update
- hypr workforce_access7.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hypr workforce_access | v < 7.3.0 | 7.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.