Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g8wg-x53j-hvjq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.

EPSS

Процентиль: 23%
0.00075
Низкий

7.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.3
nvd
около 4 лет назад

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.

EPSS

Процентиль: 23%
0.00075
Низкий

7.8 High

CVSS3

Дефекты

CWE-863