Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23r5-m2mx-p7h2

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.

EPSS

Процентиль: 16%
0.00052
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.

EPSS

Процентиль: 16%
0.00052
Низкий