Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4f7c-7x79-wr4p

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

EPSS

Процентиль: 1%
0.00012
Низкий

5 Medium

CVSS3

Дефекты

CWE-341

Связанные уязвимости

CVSS3: 5
nvd
3 месяца назад

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

CVSS3: 5
fstec
3 месяца назад

Уязвимость компонента Session Cookie Handler микропрограммного обеспечения Ethernet модулей WISE-4010LAN, WISE-4050LAN, WISE-4060LAN, позволяющая нарушителю подобрать пароли пользователей методом «грубой силы»

EPSS

Процентиль: 1%
0.00012
Низкий

5 Medium

CVSS3

Дефекты

CWE-341