CVE-2022-26973

MEDIUM

Barco Control Room Management Suite <3.14 - Info Disclosure

Title source: llm
STIX 2.1

Description

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details.

References (2)

Core 2
Core References
Product, Vendor Advisory x_refsource_misc
https://www.barco.com/en/support/transform-n-management-server

Scores

CVSS v3 5.3
EPSS 0.0070
EPSS Percentile 48.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-209
Status published
Products (1)
barco/control_room_management_suite < 3.14.1
Published Jun 02, 2022
Tracked Since Feb 18, 2026