CVE-2022-24581 | BDVDB-2026-176997 Detail

Description#

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.aceware.com/forum/viewtopic.php?f=7&t=481

Exploit#

No public exploit known

History#

Version 12022-05-27Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.