Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv4x-33m6-3qrq

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.3

Описание

Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account.

Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account.

EPSS

Процентиль: 15%
0.00048
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-294

Связанные уязвимости

CVSS3: 5.3
nvd
4 месяца назад

Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account.

EPSS

Процентиль: 15%
0.00048
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-294