PT-2022-7983 · Teleopti · Teleopti Wfm

Graph-X · Published 2022-06-29 · Updated 2022-07-07 · CVE-2017-20110

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Teleopti WFM versions up to 7.1.0

Description A problematic issue has been found in the Administration component of the software, allowing for information disclosure of credentials through JSON manipulation. This can be exploited remotely.

Recommendations For Teleopti WFM versions up to 7.1.0, apply a patch to fix this issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-20110

Affected Products

Teleopti Wfm

References · 5

• 🔥 http://seclists.org/fulldisclosure/2017/Feb/13 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20110 · Security Note
• https://vuldb.com/?id.96806 · Note
• https://t.me/cibsecurity/45351 · Telegram Post