CVE-2022-22789
Charactell - FormStorm Enterprise Account Take Over
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Charactell - FormStorm Enterprise Account Take Over
| Assigner | INCD |
| Reserved | 2022-01-07 |
| Published | 2022-01-25 |
| Updated | 2024-08-03 |
Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious user can take over an account by replacing existing password in the file.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L |
Michael Starchenko
https://www.gov.il/en/departments/faq/cve_advisories
