CVE-2022-22733
Access-Token in ElasticJob UI causes password disclosure
概要
Access-Token in ElasticJob UI causes password disclosure
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com