medium6.1
CVE-2022-29152
The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.
Impact
The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ericom | Powerterm Webconnect | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/the-emmons/CVE-Disclosures/blob/main/CVE-2022-29152/CVE-2022-29152.md
- https://www.ericom.com/powerterm/webconnect-hostview/
- https://github.com/the-emmons/CVE-Disclosures/blob/main/CVE-2022-29152/CVE-2022-29152.md
- https://www.ericom.com/powerterm/webconnect-hostview/