CVE-2022-47874

MediumPublished

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class...

Published: May 2, 2023
Updated: Jan 30, 2025
Assigning CNA: mitre
Evidence observed: May 5, 2023

Primary CVSS

6.5/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS probability estimate

21.1%

Moderate · next 30 days

Percentile: 97.6%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.

Sources

Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access ControlsExploit
Team Syslifters · php · May 5, 2023

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.