CVE-2022-45177: 
Linux Alpine vulnerability analysis and mitigation

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search={NAME]+{SURNAME] endpoint, and the /login endpoint. The web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere (NVD).

The vulnerability is classified as an Observable Response Discrepancy (CWE-203) and Code Injection (CWE-94). The CVSS v3.1 base score is 7.5 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The vulnerability affects multiple endpoints including /api/v1/vdeskintegration/user/isenableuser, /api/v1/sharedsearch, and /login (NVD).

The vulnerability allows unauthorized actors to gain access to internal state information that should be restricted. This information disclosure could potentially be used to gather intelligence about the system's internal workings and potentially lead to more sophisticated attacks (NVD).

The affected software is LIVEBOX Collaboration vDesk through version v031. Users should upgrade to a newer version if available. No specific workarounds have been publicly documented (NVD).