Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6xpf-79gp-9fc2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC.

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC.

EPSS

Процентиль: 42%
0.002
Низкий

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 8.8
nvd
около 5 лет назад

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC.

EPSS

Процентиль: 42%
0.002
Низкий

Дефекты

CWE-312