Lucene search

CVE-2022-44014

🗓️ 25 Dec 2022 05:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

An API design flaw in Simmeth Lieferantenmanager before 5.6 allows unauthorized access to SQL tables, exposing sensitive user data

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2022-44014	25 Dec 202205:15	–	nvd
Cvelist	CVE-2022-44014	25 Dec 202200:00	–	cvelist
CNVD	Simmeth System Supplier Manager Design Error Vulnerability	21 Nov 202200:00	–	cnvd
RedhatCVE	CVE-2022-44014	23 May 202500:09	–	redhatcve
Vulnrichment	CVE-2022-44014	25 Dec 202200:00	–	vulnrichment
Prion	Design/Logic Flaw	25 Dec 202205:15	–	prion
0day.today	Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass Vulnerabilities	16 Nov 202200:00	–	zdt
Packet Storm	Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass	15 Nov 202200:00	–	packetstorm

Nvd

Node

simmeth lieferantenmanagerRange<5.6

Source	Link
sec-consult	www.sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/

Parameter	Position	Path	Description	CWE
Credential	request body	/DS/LM_API/api/SelectionService/GetPaggedTab	A faulty API design allows an attacker to fetch arbitrary SQL tables, leaking user passwords and MSSQL hashes.	CWE-284
TableFilters	request body	/DS/LM_API/api/SelectionService/GetPaggedTab	A faulty API design allows an attacker to fetch arbitrary SQL tables, leaking user passwords and MSSQL hashes.	CWE-284
ImagesPath	request body	/DS/LM_API/api/ConfigurationService/GetImages	The API can be abused to read arbitrary files from the file system due to allowing paths from the frontend.	CWE-284
Mandant	request body	/DS/LM_API/api/ConfigurationService/GetConfiguration	The API call returns cleartext SMTP credentials, enabling an attacker to send phishing emails.	CWE-284
Columns	request body	/DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId	Allows an attacker to store and execute JavaScript code in victims' browsers, leading to XSS.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Dec 2022 05:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS36.5

EPSS0.0011

SSVC

CWE-284