CVE-2022-22792

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users

Score

CVSS 3.1 7.5 High

Status

Modified - cna@cyber.gov.il

Published

2022-02-16

Last modified

2024-09-17

Weaknesses

CWE-233

Affected products

• Eharmony (Mobisoft)
• Mobisoft - Mobiplus (Mobisoft - Mobiplus Project)

References

• https://www.gov.il/en/departments/faq/cve_advisories