Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c6v-c67v-hx4q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.

EPSS

Процентиль: 48%
0.00252
Низкий

8.1 High

CVSS3

Дефекты

CWE-287
CWE-306

Связанные уязвимости

CVSS3: 8.1
nvd
почти 6 лет назад

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.

EPSS

Процентиль: 48%
0.00252
Низкий

8.1 High

CVSS3

Дефекты

CWE-287
CWE-306