Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gqfq-r93q-hj3q

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.

EPSS

Процентиль: 59%
0.00378
Низкий

8.8 High

CVSS3

Дефекты

CWE-287
CWE-836

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.

EPSS

Процентиль: 59%
0.00378
Низкий

8.8 High

CVSS3

Дефекты

CWE-287
CWE-836