CVE-2022-27247 - CVE House
Back to Database
Status published Medium CVE-2022-27247

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to...

Vulnerability Description

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27247

Credits & Attribution

No credits recorded in the NVD database.

References

More from cdsoft

View All →
CVE-2014-5737
The CDsoft (aka com.wCDSOFT) application 0.2 for Android does not...
Medium 5.4

Affected Vendor

Affected Software

winhotel.mx
Vulnerable Versions:
2021

Timeline

Official Publish: May 13th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.