Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f455-qfmp-xgc2

Опубликовано: 12 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.

EPSS

Процентиль: 51%
0.00279
Низкий

7.2 High

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 7.2
nvd
около 2 лет назад

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.

EPSS

Процентиль: 51%
0.00279
Низкий

7.2 High

CVSS3

Дефекты

CWE-798