exploitDog

GHSA-3h9g-5x56-226c

Опубликовано: 06 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.5

Описание

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Ссылки

EPSS

Процентиль: 50%

0.0027

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-532

Связанные уязвимости

CVE-2022-28859

CVSS3: 6.5

nvd

почти 4 года назад

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

EPSS

Процентиль: 50%

0.0027

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-532