CVE-2022-47561

Summary

The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.

Affected Software

VendorProductVersion RangeStatus
OrmazabalekorCCP601jaffected
OrmazabalekorRCI601jaffected

Weaknesses

  • CWE-256: CWE-256 Unprotected Storage of Credentials

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References