Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6v8h-25v4-xfxx

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

EPSS

Процентиль: 56%
0.00338
Низкий

Связанные уязвимости

nvd
около 13 лет назад

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

EPSS

Процентиль: 56%
0.00338
Низкий