CVE-2022-40756

2022-09-3018:15:21

mitre

www.cve.org

actian zen psql

misconfigured

security files

master password

database access

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.