Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rc7-jmvv-4fhr

Опубликовано: 15 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 4.3

Описание

A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.

A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.

EPSS

Процентиль: 41%
0.00187
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-402
CWE-522

Связанные уязвимости

CVSS3: 4.9
nvd
больше 3 лет назад

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.

EPSS

Процентиль: 41%
0.00187
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-402
CWE-522