Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v86f-gr22-g9hh

Опубликовано: 05 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to login as root users via extracting a key from the software.

Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to login as root users via extracting a key from the software.

EPSS

Процентиль: 82%
0.01801
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to login as root users via extracting a key from the software.

EPSS

Процентиль: 82%
0.01801
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798