Vulnerability in Talend Administration Center
CVE-2022-30332
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.
EPSS: 0.008 (54.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Talend Administration_center — versions 7.3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Technical Description)
- cve@mitre.org (Release Notes, Broken Link, Vendor Advisory)
- cve@mitre.org (Third Party Advisory)
- cve@mitre.org
Frequently asked questions
- What is CVE-2022-30332?
- CVE-2022-30332 is a medium-severity vulnerability in Talend Administration Center, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2023-01-10.
- How severe is CVE-2022-30332?
- Medium severity. CVSS v3 base score is 5.3 out of 10.