Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrvc-r9q5-cgjx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

EPSS

Процентиль: 49%
0.00262
Низкий

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 7.5
nvd
почти 5 лет назад

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

EPSS

Процентиль: 49%
0.00262
Низкий

Дефекты

CWE-798