Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfv4-g52j-f26m

Опубликовано: 22 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret.

Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret.

EPSS

Процентиль: 20%
0.00063
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-261
CWE-326

Связанные уязвимости

CVSS3: 5.3
nvd
почти 3 года назад

Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret.

CVSS3: 5.3
fstec
почти 3 года назад

Уязвимость системы управления контентом и медиа-данными Adobe Experience Manager, связанная с использованием слабого механизма шифрования, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 20%
0.00063
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-261
CWE-326