VULNERABILITY INTELLIGENCE

CVE-2022-30332

CVSS score5.3 MEDIUM

EPSS probability0.86%

CISA KEVNot currently listed

Published2023-01-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.

Weakness classification

nvd@nist.gov: CWE-203
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-203

Primary references

cve@mitre.org
cve@mitre.org — Technical Description
cve@mitre.org — Third Party Advisory
cve@mitre.org — Broken Link, Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Technical Description
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Release Notes, Vendor Advisory