Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvpx-gxvp-44wq

Опубликовано: 23 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)

EPSS

Процентиль: 72%
0.00733
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 8.1
nvd
почти 3 года назад

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)

EPSS

Процентиль: 72%
0.00733
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798