CVE-2022-21818CWE-312

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the…

Medium · published February 14, 2022

CVSS v3.1
5.4
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality and integrity.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2022-02-14T23:45Z
EPSS history
Timeline
  • 14 FEB 23:45Z
    NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the…
    cvelistv5