Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2022-44001: An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed.
CVE-2022-44001 · published 3 years ago
Summary
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| backclick | backclick |
5.9.63 cpe:2.3:a:backclick:backclick:5.9.63:*:*:*:professional:*:*:* |
Original advisory text
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed.
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed.
References
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-035.t... Exploit Third Party Advisory
- https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-profes... Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published17 Nov 2022
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-44001 · NVD
Track software like this
Free during beta