CVE-2023-30222

2023-06-1600:00:00

mitre

www.cve.org

information disclosure

4d server application

password hashes

eavesdropping

cve-2023-30222

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.

References

blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/

packetstormsecurity.com

www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/