Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf66-674w-hm6h

Опубликовано: 21 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data.

This issue affects Vitals ESP: from 3.0.8 through 6.2.0.

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data.

This issue affects Vitals ESP: from 3.0.8 through 6.2.0.

EPSS

Процентиль: 47%
0.00238
Низкий

8.6 High

CVSS3

Дефекты

CWE-321
CWE-798

Связанные уязвимости

CVSS3: 8.6
nvd
больше 2 лет назад

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue affects Vitals ESP: from 3.0.8 through 6.2.0.

EPSS

Процентиль: 47%
0.00238
Низкий

8.6 High

CVSS3

Дефекты

CWE-321
CWE-798