CVE-2022-37785

HIGH

WeCube Platform 3.2.2 - Cleartext Storage of Sensitive Information in Terminal Plugin Configuration

Title source: llm
STIX 2.1

Description

An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins.

Scores

CVSS v3 7.5
EPSS 0.0052
EPSS Percentile 40.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
wecube-platform_project/wecube-platform 3.2.2
Published Jan 01, 2023
Tracked Since Feb 18, 2026