Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r8x9-p5v6-vx46

Опубликовано: 06 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

EPSS

Процентиль: 14%
0.00229
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-522

Связанные уязвимости

ubuntu
3 месяца назад

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

nvd
3 месяца назад

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

debian
3 месяца назад

A user able to connect to Agent 2 can inject an Oracle TNS connection ...

CVSS3: 4.1
fstec
3 месяца назад

Уязвимость компонента Zabbix Agent 2 системы мониторинга ИТ-инфраструктуры Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 4.1
redos
24 дня назад

Уязвимость zabbix7.4

EPSS

Процентиль: 14%
0.00229
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-522