CVE-2022-47554 in ekorCCP

Sumário

de MITRE • 19/09/2023

** UNSUPPPORTED WHEN ASSIGNED ** Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the web server.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 19/12/2022
• Divulgação: 19/09/2023
• Moderação: aceite
• Entrada: VDB-239940
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00485
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-47554
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-47554
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-47554/