CVE-2022-47880

CVSS V2 None CVSS V3 None

Description

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.

Overview

CVE ID
CVE-2022-47880

Assigner
cve@mitre.org

Vulnerability Status
Awaiting Analysis

Published Version
2023-05-12T14:15:09

Last Modified Date
2023-05-12T14:21:53

References

Reference URL	Reference Tags
http://jedox.com
https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-47880
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47880

History

Created	Old Value	New Value	Data Type	Notes
2023-05-12 15:01:51				Added to TrackCVE