CVE-2022-22789

Charactell - FormStorm Enterprise Account Take Over

Medium · published January 25, 2022

CVSS v3.1
6.1
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious user can take over an account by replacing existing password in the file.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00151 · 3.9th percentile
Published
2022-01-25T19:11Z
EPSS history
Timeline
  • 25 JAN 19:11Z
    Charactell - FormStorm Enterprise Account Take Over
    cvelistv5