VULNERABILITY INTELLIGENCE

CVE-2022-27179

CVSS score4.6 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2022-04-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Description

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-522

Primary references