Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jj7f-f2vq-pvc7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.

EPSS

Процентиль: 83%
0.01914
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 10
nvd
больше 6 лет назад

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.

EPSS

Процентиль: 83%
0.01914
Низкий

Дефекты

CWE-306