Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4cpf-vq4f-2rm5

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 8.4

Описание

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs. By default, this directory has insecure directory paths that allow access to the SQL Server database and configuration files, which can contain sensitive data.

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs. By default, this directory has insecure directory paths that allow access to the SQL Server database and configuration files, which can contain sensitive data.

EPSS

Процентиль: 10%
0.00036
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.4
nvd
2 месяца назад

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs. By default, this directory has insecure directory paths that allow access to the SQL Server database and configuration files, which can contain sensitive data.

EPSS

Процентиль: 10%
0.00036
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-732