Security Advisory

CVE-2022-41399

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-28 00:00:00

Last updated 2025-01-31 16:45:01

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decrypt the database connection string for the PORTAL database found in the "dbconfig.xml". This issue could allow attackers to obtain access to the SQL database.

← Browse all CVEs View on cve.org ↗