Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhw8-ppcx-3fjj

Опубликовано: 14 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

EPSS

Процентиль: 22%
0.00074
Низкий

7.5 High

CVSS3

Дефекты

CWE-287
CWE-289

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

EPSS

Процентиль: 22%
0.00074
Низкий

7.5 High

CVSS3

Дефекты

CWE-287
CWE-289