The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance. This issue could allow attackers to login to the Solr dashboard with admin privileges and access sensitive information.
References
Link | Resource |
---|---|
https://www.sage.com/en-ca/products/sage-300/ | Product |
Configurations
History
05 May 2023, 18:02
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:sage:sage_300:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | (MISC) https://www.sage.com/en-ca/products/sage-300/ - Product | |
CWE | CWE-798 |
28 Apr 2023, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-28 13:15
Updated : 2024-02-04 23:37
NVD link : CVE-2022-41398
Mitre link : CVE-2022-41398
CVE.ORG link : CVE-2022-41398
JSON object : View
Products Affected
sage
- sage_300
CWE
CWE-798
Use of Hard-coded Credentials