CVE-2017-20110CWE-200

Teleopti WFM Administration Credentials information disclosure

Medium · published June 29, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentials). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01047 · 63.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-06-29T06:55Z
EPSS history
Timeline
  • 29 JUN 06:55Z
    Teleopti WFM Administration Credentials information disclosure
    cvelistv5