Riskcovery

CVE-2022-22733

Access-Token in ElasticJob UI causes password disclosure

State
Published
Severity
Not scored
Published
Jan 20, 2022
Updated
Aug 3, 2024
Reserved
Jan 7, 2022

Read the record on cve.org

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

ProductVersions
Apache ShardingSphere ElasticJob-UIApache Software Foundation
  • Apache ShardingSphere ElasticJob-UI 3.x through 3.0.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.