CVE-2017-20110

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentials). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.02% chance of exploitation in the next 30 days, 61th percentile

Published

2022-06-29

Updated

2025-04-15

Proof-of-concept exploits (1)

• http://seclists.org/fulldisclosure/2017/Feb/13

References

• CVE Record
• NVD entry

Related

• CVE-2017-20109
• CVE-2017-20111
• CVE-2017-20108
• CVE-2017-20113
• CVE-2017-20107
• CVE-2017-20114