CVE-2023-30222: High severity 4d vulnerability
An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-30222.
What is the severity of CVE-2023-30222?
The severity of CVE-2023-30222 is high with a severity value of 7.5.
How does CVE-2023-30222 affect 4D Server Application?
CVE-2023-30222 allows attackers to retrieve password hashes for all users via eavesdropping in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier versions.
How can I fix CVE-2023-30222?
To fix CVE-2023-30222, it is recommended to update to the latest version (v19 R8 or later) of 4D SAS 4D Server Application.
Where can I find more information about CVE-2023-30222?
You can find more information about CVE-2023-30222 at the following references: [link](https://packetstormsecurity.com) and [link](https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/).