CVE-2022-22703

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 17, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-227049.8The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expeCVE-2022-227067.8Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 througCVE-2022-227075.9In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bCVE-2022-227097.8VP9 Video Extensions Remote Code Execution VulnerabilityCVE-2022-22714.8The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admiCVE-2022-227105.5Windows Common Log File System Driver Denial of Service VulnerabilityCVE-2022-227115.7Windows BitLocker Information Disclosure VulnerabilityCVE-2022-227125.6Windows Hyper-V Denial of Service VulnerabilityCVE-2022-227135.6Windows Hyper-V Denial of Service VulnerabilityCVE-2022-227157.8Named Pipe File System Elevation of Privilege VulnerabilityCVE-2022-227165.5Microsoft Excel Information Disclosure VulnerabilityCVE-2022-227177.0Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-22703: Medium severity, CVSS 5.5 | Vulnix