Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-362x-qgjh-vq8r

Опубликовано: 12 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 3.1

Описание

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.

EPSS

Процентиль: 1%
0.00009
Низкий

2 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 3.1
nvd
6 месяцев назад

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.

EPSS

Процентиль: 1%
0.00009
Низкий

2 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-311