Beveiligingsadvies

CVE-2022-3090

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-17 21:55:37

Laatst bijgewerkt 2025-04-16 16:06:05

Toegewezen door icscert

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.

← Alle CVE's bekijken Bekijk op cve.org ↗