Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjpc-vgm9-wp5g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.

EPSS

Процентиль: 22%
0.0007
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 4.9
nvd
почти 7 лет назад

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.

EPSS

Процентиль: 22%
0.0007
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-311