Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h4f-v5fw-fh7v

Опубликовано: 03 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

EPSS

Процентиль: 44%
0.00218
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 8
nvd
почти 4 года назад

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

EPSS

Процентиль: 44%
0.00218
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-668