VULNERABILITY INTELLIGENCE

CVE-2022-22792

CVSS score6.6 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2022-02-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Description

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users

Weakness classification

  • cna@cyber.gov.il: CWE-233
  • nvd@nist.gov: NVD-CWE-Other

Primary references