Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p449-q86c-mx7r

Опубликовано: 21 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.

An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.

EPSS

Процентиль: 36%
0.00153
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.

EPSS

Процентиль: 36%
0.00153
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-312