Lucene search

K
nvd[email protected]NVD:CVE-2023-30222
HistoryJun 16, 2023 - 5:15 p.m.

CVE-2023-30222

2023-06-1617:15:11
CWE-295
web.nvd.nist.gov
cve-2023-30222
4d sas
information disclosure
password hashes
eavesdropping

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.

Affected configurations

NVD
Node
4dserverMatch17
OR
4dserverMatch18-
OR
4dserverMatch18r5
OR
4dserverMatch19-
OR
4dserverMatch19r7

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

Related for NVD:CVE-2023-30222