CVE-2022-45893: Planetestream Planet Estream

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access.

Affected products

• Planetestream Planet Estream: before 6.72.10.07 (fixed in 6.72.10.07)

Published 2022-12-25. Last modified 2026-06-17.