4.3
CVE-2022-38756
- EPSS 0.23%
- Veröffentlicht 16.12.2022 23:15:09
- Zuletzt bearbeitet 18.04.2025 14:15:18
- Quelle security@opentext.com
- CVE-Watchlists
- Unerledigt
LoginA vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microfocus ≫ Groupwise Version < 18.4.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.453 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
|
| security@opentext.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.