CVE-2022-21236

CVSS v3 Score
8.1
High
CVSS v2 Score
5.0
Medium

Vulnerability Description

An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

CVSS:7.5(High)

Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

CVSS:6.5(Medium)

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vu...

CVSS:7.5(High)

Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

CVSS:6.5(Medium)

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vu...

CVSS:5.3(Medium)

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_...

CVSS:5.3(Medium)

Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trian...