CVE-2022-2569

MediumCVSS 5.5

Published: 24/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

The vulnerability allows an authenticated user to read sensitive session data stored in cleartext in the OAuth database. The affected device does not encrypt this information.

Risk Assessment

The risk involves potential session hijacking or impersonation of other users by anyone with access to the OAuth database. This could lead to unauthorized access to organizational resources.

Recommendation

Immediately encrypt session data stored in the OAuth database and restrict database access to authorized processes only. Consider updating the device software to a version that fixes this vulnerability.

Original NVD description (English source)

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users