Vulnerabilities > CVE-2023-52286 - Unspecified vulnerability in Tencent Distributed SQL 1.8.5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
tencent

Summary

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info request, a related issue to CVE-2023-42387.

Vulnerable Configurations

Part Description Count
Application
Tencent
2