Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g2f4-fx9f-49rr

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

EPSS

Процентиль: 34%
0.00134
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.2
nvd
больше 9 лет назад

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.

EPSS

Процентиль: 34%
0.00134
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-200