Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rj72-j8c2-fwx3

Опубликовано: 27 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

EPSS

Процентиль: 47%
0.00556
Низкий

2.7 Low

CVSS3

Дефекты

CWE-256

Связанные уязвимости

CVSS3: 2.7
ubuntu
почти 2 года назад

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

CVSS3: 2.7
nvd
почти 2 года назад

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

CVSS3: 2.7
debian
почти 2 года назад

When exporting media types, the password is exported in the YAML in pl ...

CVSS3: 2.7
fstec
почти 2 года назад

Уязвимость системы мониторинга ИТ-инфраструктуры Zabbix, связанная с хранением пароля в незашифрованном виде, позволяющая нарушителю получить доступ к защищаемой информации

CVSS3: 2.7
altlinux
больше 2 лет назад

ALT-PU-2024-18436: package `zabbix` update to version 6.0.30-alt1

EPSS

Процентиль: 47%
0.00556
Низкий

2.7 Low

CVSS3

Дефекты

CWE-256