Unrated severityNVD Advisory· Published Aug 16, 2022· Updated Apr 10, 2025

Portal for ArcGIS system properties are not properly encrypted (10.8.1 only)

CVE-2022-38194

Description

In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user reading sensitive information from a properties file.

Affected products

Esri/Portal For Arcgisllm-fuzzy2 versions
= 10.8.1+ 1 more
- (no CPE)range: = 10.8.1
- (no CPE)range: 10.8.1

Patches

Vulnerability mechanics

References

www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000