CVE-2022-40756
High
Description
If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.
SeverityHigh
CVSS8.8
Exploit probability—
ProductActian Psql
PublishedSep 30, 2022
First seenSep 30, 2022
Weakness typeCWE-732CWE-732
How to fix
Update
- actian zen14.21.022, 15.01.017 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| actian psql | 11 ≤ v ≤ 13 | — |
| actian zen | 14.0 ≤ v < 14.21.022, 15.0 ≤ v < 15.01.017 | 14.21.022, 15.01.017 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.