CVE-2022-21184 Information disclosure in Atvise
Man-in-the-middle attackers can intercept plaintext HTTP traffic to steal login credentials from Bachmann Visutec Atvise license registration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-21184?
CVE-2022-21184 is a medium-severity vulnerability in Bachmann Visutec GmbH Atvise, published on 17 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Which versions are affected by CVE-2022-21184?
It affects 1 product.
Products include Atvise Atvise.
How do I fix CVE-2022-21184?
No fix has been published for CVE-2022-21184 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-21184 being exploited?
There is no known exploitation of CVE-2022-21184 in the wild and no public exploit code.
Other vulnerabilities in Bachmann Visutec GmbH Atvise
Sources
Also known as GHSA-fxwx-rj48-wvv5.