Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fm9p-5c8h-mw8h

Опубликовано: 25 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

EPSS

Процентиль: 31%
0.00117
Низкий

8.1 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8.1
nvd
больше 2 лет назад

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

EPSS

Процентиль: 31%
0.00117
Низкий

8.1 High

CVSS3

Дефекты

CWE-862