CVE-2022-27179CWE-522
ICSA-22-104-03 Red Lion DA50N
Medium · published April 20, 2022
What it is
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
The record
Technical detail
- CVSS v3.1
- 4.6 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00557 · 45.7th percentile
- Weakness
- CWE-522 · Insufficiently Protected Credentials
- Published
- 2022-04-20T15:30Z
EPSS history
Timeline