← Database

CVE-2022-47880

MEDIUM CVSS: 5.3 Published: 2023-05-12 Modified: 2026-07-09

Description

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.

Affected Platforms

Jedox JedoxJedox Jedox Cloud

Weakness Type

CWE-522, CWE-522

References