Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3phv-44jf-4v33

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276
CWE-532

Связанные уязвимости

CVSS3: 5.5
nvd
почти 2 года назад

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276
CWE-532