Vulnerabilities > CVE-2022-47874 - Unspecified vulnerability in Jedox Cloud and Jedox

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
jedox
NVD
Published: 2023-05-02
Updated: 2024-11-21

Summary

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.

Vulnerable Configurations

Part Description Count
Application
Jedox
2

References