CVE-2023-30222

Опубликовано: 16 июн. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.

Ссылки

https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/
https://packetstormsecurity.com
Not Applicable
Third Party Advisory
VDB Entry
https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/
Exploit
https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/
https://packetstormsecurity.com
Not Applicable
Third Party Advisory
VDB Entry
https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:4d:server:17:*:*:*:*:*:*:*

cpe:2.3:a:4d:server:18:-:*:*:*:*:*:*

cpe:2.3:a:4d:server:18:r5:*:*:*:*:*:*

cpe:2.3:a:4d:server:19:-:*:*:*:*:*:*

cpe:2.3:a:4d:server:19:r7:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00301

Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

GHSA-6474-3m8h-q35j