PT-2022-20304 · Unknown · Terminalfour

Published 2022-05-16 · Updated 2022-10-27 · CVE-2022-30770

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Terminalfour versions 8.2.x prior to 8.2.18.2.1 Terminalfour versions 8.2.x prior to 8.2.18.5 Terminalfour versions 8.3.x prior to 8.3.8

Description The issue allows an attacker to exploit a vulnerability that could mislead an administrator and steal their credentials. This is achieved through an XSS vulnerability.

Recommendations For Terminalfour versions 8.2.x prior to 8.2.18.2.1, update to version 8.2.18.2.1 to resolve the issue. For Terminalfour versions 8.2.x prior to 8.2.18.5, update to version 8.2.18.5 to resolve the issue. For Terminalfour versions 8.3.x prior to 8.3.8, update to version 8.3.8 to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-30770

Affected Products

Terminalfour

References · 10

• 🔥 https://bulletproofsi.com/wp-content/uploads/2022/10/Bulletproof_Vuls_Id_CVE-2022-30770.pdf · Exploit
• 🔥 https://bulletproofsi.com/wp-content/uploads/2022/08/Bulletproof_Vuls_Id_2022-30770.pdf · Exploit
• https://docs.terminalfour.com/release-notes/83/8.html · Vendor Advisory
• https://docs.terminalfour.com/release-notes/82/1821.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30770 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30770 · Vendor Advisory
• https://docs.terminalfour.com/release-notes/82/185.html · Vendor Advisory
• https://t.me/cibsecurity/42715 · Telegram Post
• https://t.me/cvenotify/30252 · Telegram Post
• https://t.me/cvenotify/30644 · Telegram Post