CVE-2022-30622

Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within the JS code sent to the customer within the Login.js file is a strong user (which is not documented) and also the password, which allow for super-user access. Username: chcadmin, Password: chcpassword.

• CWE-798

• https://www.gov.il/en/Departments/faq/cve_advisoriesThird Party Advisory
• https://www.gov.il/en/Departments/faq/cve_advisoriesThird Party Advisory

Published

Jul 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30617An authenticated user with access to the Strapi admin panel …8.8
• CVE-2022-30618An authenticated user with access to the Strapi admin panel …7.5
• CVE-2022-30619Editable SQL Queries behind Base64 encoding sending from the…8.8
• CVE-2022-3062The Simple File List WordPress plugin before 4.4.12 does not…6.1
• CVE-2022-30620On Cellinx Camera with guest enabled, attacker with web acce…8.8
• CVE-2022-30621Allows a remote user to read files on the camera's OS "GetFi…6.5
• CVE-2022-30623The server checks the user's cookie in a non-standard way, a…9.8
• CVE-2022-30624Browsing the admin.html page allows the user to reset the ad…7.5
• CVE-2022-30625Directory listing is a web server function that displays the…5.3
• CVE-2022-30626Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show…7.5
• CVE-2022-30627This vulnerability affects all of the company's products tha…7.5
• CVE-2022-30628It was possible to download all receipts without authenticat…5.5