Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j7p4-2vqr-pgcw

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.

OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.

EPSS

Процентиль: 45%
0.00229
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 11 лет назад

OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.

EPSS

Процентиль: 45%
0.00229
Низкий

Дефекты

CWE-287