Vulnerability in Talend Administration Center
CVE-2022-30332
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.008 (56.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 56.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Talend Administration Center — versions 7.3.1
Weakness classification (CWE)
References
- cwe.mitre.org/data/definitions/204.html (Technical Description)
- help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw (Release Notes, Broken Link, Vendor Advisory)
- excellium-services.com/cert-xlm-advisory/CVE-2022-30332 (Third Party Advisory)
- cds.thalesgroup.com/en/tcs-cert/CVE-2022-30332
Frequently asked questions
- What is CVE-2022-30332?
- CVE-2022-30332 is a medium-severity vulnerability in Talend Administration Center, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2023-01-10.
- How severe is CVE-2022-30332?
- Medium severity. CVSS v3 base score is 5.3 out of 10.