CVE-2022-22733
Access-Token in ElasticJob UI causes password disclosure
Résumé
Access-Token in ElasticJob UI causes password disclosure
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com