cve-2022-24637

{
  "cvss": 0.0,
  "datePublished": "2026-10-25T00:00:00Z",
  "dateUpdated": "2026-10-25T00:00:00Z",
  "description": "Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended \"<?php sequence) aren't handled by the PHP interpreter.",
  "dueDate": "",
  "id": "CVE-2022-24637",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "open_web_analytics",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "openwebanalytics open_web_analytics Improper Privilege Management",
  "vendor": "openwebanalytics"
}