CVE-2022-39031 — Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -3

CVE-2022-39031

Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -3 PUBLISHED

Description (CNA)

Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.

Affected (CNA)

Vendor / product	Versions
Smart eVision Information Technology Inc. / Smart eVision	affected 2022.02.21

CWE

CWE-200

References

https://www.twcert.org.tw/tw/cp-132-6568-331c1-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6568-331c1-1.html

CISA-ADP

No English description supplied.

No references supplied.