Vulnerabilities > CVE-2022-46484 - Insecure Storage of Sensitive Information vulnerability in Ngsurvey 2.4.28
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |