CVE-2025-22492 — Insecure storage of connection strings in FRS
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the …
Published: 2025-02-28 · CVSS: 6.3 · CVSS 3.1
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7