CVE-2022-41398: High severity sage 300 vulnerability
The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance. This issue could allow attackers to login to the Solr dashboard with admin privileges and access sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-41398?
CVE-2022-41398 is a vulnerability in the optional Global Search feature for Sage 300 through version 2022.
How does CVE-2022-41398 affect Sage 300?
CVE-2022-41398 allows attackers to log in to the Solr dashboard with admin privileges and potentially access sensitive information in Sage 300.
What is the severity level of CVE-2022-41398?
CVE-2022-41398 has a severity level of 7.5 (high).
How can I fix CVE-2022-41398?
To fix CVE-2022-41398, it is recommended to update Sage 300 to a version that addresses the vulnerability.
Where can I find more information about CVE-2022-41398?
You can find more information about CVE-2022-41398 on the official Sage website: [https://www.sage.com/en-ca/products/sage-300/]