An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LM_API/api/SelectionService/GetPaggedTab.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-12-25T00:00:00
Updated: 2024-08-03T13:47:05.169Z
Reserved: 2022-10-29T00:00:00
Link: CVE-2022-44014
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-12-25T05:15:10.683
Modified: 2022-12-30T22:02:48.033
Link: CVE-2022-44014
Redhat
No data.