Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r8x9-p5v6-vx46

Опубликовано: 06 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.5

Описание

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

EPSS

Процентиль: 13%
0.00222
Низкий

5.1 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 6.5
ubuntu
6 месяцев назад

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

CVSS3: 6.5
nvd
6 месяцев назад

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

CVSS3: 6.5
debian
6 месяцев назад

A user able to connect to Agent 2 can inject an Oracle TNS connection ...

CVSS3: 4.1
redos
4 месяца назад

Уязвимость zabbix7.4

CVSS3: 4.1
redos
4 месяца назад

Уязвимость zabbix7-lts

EPSS

Процентиль: 13%
0.00222
Низкий

5.1 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-522