INCDCVELIST:CVE-2022-22792CVE-2022-22792 MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters
6.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
0.001 Low
EPSS
Percentile
49.4%
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users
CNA Affected
[
{
"product": "eharmony",
"vendor": "MobiSoft",
"versions": [
{
"lessThanOrEqual": "1.0",
"status": "affected",
"version": "MobiPlus",
"versionType": "custom"
}
]
}
]Related
6.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
0.001 Low
EPSS
Percentile
49.4%