CVEvulnerability
CVE-2023-30222
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-295
Description
An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.
Affected configurations
• 4d server 17
• 4d server 18
• 4d server 19
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/ blog.4d.com
- https://packetstormsecurity.com Not Applicable, Third Party Advisory, VDB Entry
- https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/ Exploit
- https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/ blog.4d.com
- https://packetstormsecurity.com Not Applicable, Third Party Advisory, VDB Entry
- https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/ Exploit