Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjfq-3hm6-c27w

Опубликовано: 29 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

EPSS

Процентиль: 58%
0.00368
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

EPSS

Процентиль: 58%
0.00368
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-522