CVE-2022-38112CWE-312

Sensitive Information Disclosure Vulnerability

High · published January 20, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00416 · 34.8th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2023-01-20T00:00Z
EPSS history
Timeline
  • 20 JAN 00:00Z
    Sensitive Information Disclosure Vulnerability
    cvelistv5