Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gwcv-7xq5-34jj

Опубликовано: 05 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

EPSS

Процентиль: 14%
0.00047
Низкий

7.5 High

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

EPSS

Процентиль: 14%
0.00047
Низкий

7.5 High

CVSS3

Дефекты

CWE-330