Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v64w-g6gx-w35j

Опубликовано: 27 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.

EPSS

Процентиль: 27%
0.00097
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.

EPSS

Процентиль: 27%
0.00097
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94