critical9.1

CVE-2022-44013

An issue was discovered in Simmeth Lieferantenmanager before 5.6.

Impact

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked.

Affected products

Vendor	Product	Affected versions
Simmeth	Lieferantenmanager	before 5.6

Weakness classification

CWE-306

References

NVD record
CVE.org record
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/