CVE-2022-38583

On versions of Sage 300 2017 - 2022 6.4.x - 6.9.x which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configuration, a low-privileged Sage 300 workstation user could abuse their access to the "SharedData" folder on the connected Sage 300 server to view and/or modify the...

CVE-2022-38583

creationtimestamp| type| source ---|---|--- 2023-04-28 16:27:22+00:00| seen| https://t.me/cibsecurity/63046...

CVE-2022-38583

The vulnerability CVE-2022-38583 affects Sage 300 2017–2022 (6.4.x–6.9.x) in Windows Peer-to-Peer or Client-Server configurations. A low-privilege Sage 300 workstation user can access the server’s SharedData folder to view or modify credentials for Sage 300 users and SQL accounts, enabling impers...