CVE-2022-34659

HIGH

7.5

Description

A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/10/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

siemens:simcenter_star-ccm\+_viewer

Weaknesses (CWE)

CWE-200

References

https://cert-portal.siemens.com/productcert/pdf/ssa-555707.pdf(productcert@siemens.com)

https://cert-portal.siemens.com/productcert/pdf/ssa-555707.pdf(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.