Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m97r-wj82-82xw

Опубликовано: 18 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.

EPSS

Процентиль: 16%
0.00052
Низкий

7.1 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.1
nvd
около 4 лет назад

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.

EPSS

Процентиль: 16%
0.00052
Низкий

7.1 High

CVSS3

Дефекты

CWE-522