CVE-2022-32254

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-322555.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322566.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322579.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web servicCVE-2022-322587.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older featurCVE-2022-322596.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of tCVE-2022-32267.2An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older thanCVE-2022-322609.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary usCVE-2022-322617.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguratCVE-2022-322629.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload sCVE-2022-322637.5Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.CVE-2022-322647.5sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connCVE-2022-322655.3qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.
CVE-2022-32254: High severity, CVSS 7.5 | Vulnix