CVE-2022-45183: Ironmansoftware PowerShell Universal

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.

Affected products

• Ironmansoftware PowerShell Universal: from 2.0.0, before 2.12.6 (fixed in 2.12.6); from 3.0.0, before 3.4.7 (fixed in 3.4.7); from 3.5.0, before 3.5.3 (fixed in 3.5.3)

Published 2022-11-14. Last modified 2026-06-17.