Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfxq-6qfr-g8m8

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

EPSS

Процентиль: 59%
0.00383
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
больше 11 лет назад

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

nvd
больше 11 лет назад

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

EPSS

Процентиль: 59%
0.00383
Низкий

Дефекты

CWE-287