medium5.3Public exploit code
CVE-2022-47880
An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database conne…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks2023-05-05 · webapps · php
Impact
An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jedox | Jedox | Version 2020.2.5 |
| Jedox | Jedox Cloud | All versions |