CVE-2022-41397

概要

参考情報

• sage.com/en-ca/products/sage-300 · Product

sage 300 のその他の脆弱性

• CVE-2023-29927中 4.3Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, partic…
• CVE-2022-41400緊急 9.8Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM…
• CVE-2022-41399高 7.5The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decryp…
• CVE-2022-41398高 7.5The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr i…
• CVE-2022-38583高 7.8On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configura…