Security Advisory

CVE-2022-47561

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-20 07:54:53
Last updated 2024-09-24 18:06:23
Assigner INCIBE
State PUBLISHED

Description

The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.