CVE-2022-43958CWE-256

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39)

High · published November 8, 2022

CVSS v3.1
7.6
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database without any hashing mechanism. This could allow an attacker to gain access to credentials and impersonate other users.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2022-11-08T00:00Z
EPSS history
Timeline
  • 08 NOV 00:00Z
    A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39)
    cvelistv5