CVE-2022-47561
Unprotected Storage of Credentials in Ormazabal products
- State
- Published
- Severity
- 7.3 High
- Published
- Sep 20, 2023
- Updated
- Sep 24, 2024
- Reserved
- Dec 19, 2022
Description
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L | INCIBE |
Weaknesses
- CWE-256 Unprotected Storage of Credentials
Affected Products
| Product | Versions |
|---|---|
ekorCCPOrmazabal |
|
ekorRCIOrmazabal |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.