Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2m69-x28v-rwx9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

EPSS

Процентиль: 99%
0.75978
Высокий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 13 лет назад

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

EPSS

Процентиль: 99%
0.75978
Высокий

Дефекты

CWE-287