Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-93rm-c2r8-5v86

Опубликовано: 17 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

EPSS

Процентиль: 24%
0.0008
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521

Связанные уязвимости

CVSS3: 9.8
nvd
3 месяца назад

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

EPSS

Процентиль: 24%
0.0008
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521