Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6pf3-gf23-w78h

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.

EPSS

Процентиль: 63%
0.00444
Низкий

7.2 High

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 7.2
nvd
почти 9 лет назад

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.

EPSS

Процентиль: 63%
0.00444
Низкий

7.2 High

CVSS3

Дефекты

CWE-798