Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-842v-gv8w-xp7c

Опубликовано: 09 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 5.9

Описание

Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved.

Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved.

EPSS

Процентиль: 11%
0.00037
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 5.9
nvd
30 дней назад

Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved.

EPSS

Процентиль: 11%
0.00037
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-639