CVE-2023-30222

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Improper Certificate Validation pada 4d server. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.

Rincian

Terbit di NVD

16 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://packetstormsecurity.com not applicable · advisory pihak ketiga · vdb entry
• https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/ exploit
• https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/