Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6wjv-8p85-pcxm

Опубликовано: 19 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 8.1

Описание

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.

EPSS

Процентиль: 98%
0.46062
Средний

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-321

Связанные уязвимости

CVSS3: 8.1
nvd
30 дней назад

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.

EPSS

Процентиль: 98%
0.46062
Средний

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-321