CVE-2022-34659: Infoleak
Published Aug 10, 2022
·Updated
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.
Affected Software
1 affected component
Siemens Simcenter Star-ccm\+ Viewer
Event History
Aug 10, 2022
CVE Published
via MITRE·11:17 AM
Data Sourced
via MITRE·11:17 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which deployments are affected?
Only deployments using the Power-on-Demand public license server are affected. The issue applies to all versions under that usage condition.
2
What can an unauthenticated attacker obtain?
An attacker can retrieve user names, host names, and display names of users exposed through the public license server. Exploitation is network-accessible and does not require privileges or user interaction.