Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5x5-v9cp-7w65

Опубликовано: 16 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.

EPSS

Процентиль: 68%
0.00557
Низкий

8.8 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.

EPSS

Процентиль: 68%
0.00557
Низкий

8.8 High

CVSS3

Дефекты

CWE-284