PT-2022-18122 · Softwarex · Softwarex

CVE-2022-26885

Published

2022-11-24

Updated

2023-08-08

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.0.6

Description When using tasks to read config files, there is a risk of database password disclosure.

Recommendations For versions prior to 2.0.6, upgrade to version 2.0.6 or higher.

Exploit

Fix

Insufficiently Protected Credentials

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-26885

GHSA-JVC3-WJF6-7C6C

Softwarex