CVE-2022-21184

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319CWE-522

Affected software

VendorProductVersions
Bachmann Visutec GmbHAtvise3.5.4; 3.6; 3.7

References

Timeline

Published
Jun 17, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-211869.8The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitiCVE-2022-211879.8The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when usiCVE-2022-211899.8The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPath(CVE-2022-21199.8OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOCVE-2022-211909.8This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). CVE-2022-211919.8Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other checCVE-2022-211927.5All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protectioCVE-2022-211937.5Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on theCVE-2022-211949.8The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUMCVE-2022-211957.5All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.CVE-2022-211969.8MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5CVE-2022-211977.5Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of
CVE-2022-21184: Medium severity, CVSS 5.9 | Vulnix