CVE-2022-35202

Summary

CVE-2022-35202 is a vulnerability affecting Sitevision version 10.3.1 and older. In certain non-default configurations, it enables a remote attacker to obtain private keys used for signing SAML Authn requests. The root cause is a Java keystore that can be made accessible and downloadable via WebDAV. Despite being protected by a weak, auto-generated password, this vulnerability poses a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.