CVE-2022-47874

Medium · 6.5

CVSS

6.5

EPSS

21.1%

Published

May 2, 2023

CISA due date

—

The record

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.

Affected packages

Ecosystem	Package	Introduced	Fixed