CVEvulnerability
CVE-2022-30332
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-203
Description
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.
Affected configurations
• talend administration center 7.3.1
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-30332 cds.thalesgroup.com
- https://cwe.mitre.org/data/definitions/204.html Technical Description
- https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332 Third Party Advisory
- https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw Broken Link, Release Notes, Vendor Advisory
- https://cwe.mitre.org/data/definitions/204.html Technical Description
- https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332 Third Party Advisory
- https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw Broken Link, Release Notes, Vendor Advisory