Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6gpj-r895-3gxv

Опубликовано: 25 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked.

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked.

EPSS

Процентиль: 54%
0.00311
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-287
CWE-306

Связанные уязвимости

CVSS3: 9.1
nvd
около 3 лет назад

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked.

EPSS

Процентиль: 54%
0.00311
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-287
CWE-306