CVE-2022-38194

Portal for ArcGIS system properties are not properly encrypted (10.8.1 only)

CVSS 6.7 MEDIUMEPSS 0.1%CWE-311

In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user reading sensitive information from a properties file.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

Produtos afetados

Esri · Portal for ArcGIS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/