← Back to CVE List

CVE-2022-44014

Published: 2022-12-25T05:15Z
Last Modified: 2025-04-15T14:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LM_API/api/SelectionService/GetPaggedTab. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt