CVE-2022-25518

In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of…

published March 22, 2022

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of the users who login to the application by querying the database table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00771 · 55.2th percentile
Published
2022-03-22T21:12Z
EPSS history
Timeline
  • 22 MAR 21:12Z
    In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of…
    cvelistv5