Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mcpr-4qmc-69c2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.

EPSS

Процентиль: 63%
0.00443
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
почти 9 лет назад

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.

CVSS3: 9.8
debian
почти 9 лет назад

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, an ...

EPSS

Процентиль: 63%
0.00443
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287