CVE-2022-39029 — Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1

CVE-2022-39029

Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1 PUBLISHED

Description (CNA)

Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.

Affected (CNA)

Vendor / product	Versions
Smart eVision Information Technology Inc. / Smart eVision	affected 2022.02.21

CWE

CWE-200

References

https://www.twcert.org.tw/tw/cp-132-6566-3805b-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6566-3805b-1.html

CISA-ADP

No English description supplied.

No references supplied.