Beveiligingsadvies

CVE-2022-24581

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-05-27 18:29:47
Laatst bijgewerkt 2026-07-09 00:17:16
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software.