Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m839-8xgr-vqhm

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.3

Описание

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest version of NMIS/BioDose introduces an option to use Windows user authentication with the database, which would restrict this database connection.

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest version of NMIS/BioDose introduces an option to use Windows user authentication with the database, which would restrict this database connection.

EPSS

Процентиль: 20%
0.00065
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-603

Связанные уязвимости

CVSS3: 8.3
nvd
2 месяца назад

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest version of NMIS/BioDose introduces an option to use Windows user authentication with the database, which would restrict this database connection.

EPSS

Процентиль: 20%
0.00065
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-603