CVE-2022-22733

Access-Token in ElasticJob UI causes password disclosure

Summary

Original description

The description as published by the source.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web lists.apache.org
web openwall.com

Metadata

CVE: CVE-2022-22733
Published: 2022-01-20
First seen on SecPulse: 4 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-200

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago