Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrx5-hc62-qwv6

Опубликовано: 15 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.

EPSS

Процентиль: 51%
0.00275
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-287
CWE-836

Связанные уязвимости

CVSS3: 6.2
nvd
больше 2 лет назад

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.

EPSS

Процентиль: 51%
0.00275
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-287
CWE-836