Vulnerabilities > CVE-2022-26423 - Missing Authorization vulnerability in Aethon TUG Home Base Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
aethon
CWE-862

Summary

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Vulnerable Configurations

Part Description Count
Application
Aethon
1

Common Weakness Enumeration (CWE)