CVE-2022-41397

Mô tả

Tham khảo

• sage.com/en-ca/products/sage-300 · Product

Lỗ hổng khác của sage 300

• CVE-2023-29927TRUNG BÌNH 4.3Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, partic…
• CVE-2022-41400NGHIÊM TRỌNG 9.8Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM…
• CVE-2022-41399CAO 7.5The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decryp…
• CVE-2022-41398CAO 7.5The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr i…
• CVE-2022-38583CAO 7.8On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configura…