CVE-2022-24255

Impact

Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
• https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/