CVE-2022-47554
Exposure of Sensitive Information in Ormazabal products
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Exposure of Sensitive Information in Ormazabal products
| Assigner | INCIBE |
| Reserved | 2022-12-19 |
| Published | 2023-09-19 |
| Updated | 2024-08-03 |
Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the web server.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Jacinto Moral Matellán
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
