Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwwg-f5h3-wwv3

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

EPSS

Процентиль: 37%
0.0016
Низкий

7.5 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

redhat
около 12 лет назад

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

CVSS3: 7.5
nvd
почти 8 лет назад

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

EPSS

Процентиль: 37%
0.0016
Низкий

7.5 High

CVSS3

Дефекты

CWE-384