CVE-2017-20109CWE-200

Teleopti WFM Administration GetOneTenant Credentials information disclosure

Medium · published June 29, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to information disclosure (Credentials). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00564 · 45.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-06-29T06:55Z
EPSS history
Timeline
  • 29 JUN 06:55Z
    Teleopti WFM Administration GetOneTenant Credentials information disclosure
    cvelistv5