Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m92p-9h44-3748

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user passwords or delete the database.

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user passwords or delete the database.

EPSS

Процентиль: 45%
0.00222
Низкий

Дефекты

CWE-294

Связанные уязвимости

CVSS3: 8.1
nvd
больше 4 лет назад

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user passwords or delete the database.

EPSS

Процентиль: 45%
0.00222
Низкий

Дефекты

CWE-294