Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32mh-jmjq-p49p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.

EPSS

Процентиль: 63%
0.00437
Низкий

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.5
nvd
почти 5 лет назад

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.

EPSS

Процентиль: 63%
0.00437
Низкий

Дефекты

CWE-522