CVE-2022-34659

EPSS 0.34%
Veröffentlicht 10.08.2022 12:15:12
Zuletzt bearbeitet 21.11.2024 07:09:55
Quelle productcert@siemens.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Siemens ≫ Simcenter Star-ccm+ Viewer

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.56

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://cert-portal.siemens.com/productcert/pdf/ssa-555707.pdf

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2022-34659

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-34659

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-34659

EUVD