Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vxwr-95xc-xxrg

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.

EPSS

Процентиль: 37%
0.00157
Низкий

7.8 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 7.8
nvd
почти 7 лет назад

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость программных средств для управления сетевыми ресурсами Junos Space Service Now и Junos Space Service Insight, связанная с ошибками управления регистрационными данными, позволяющая нарушителю получить доступ к сохраненным в виде открытого текста учетным данным

EPSS

Процентиль: 37%
0.00157
Низкий

7.8 High

CVSS3

Дефекты

CWE-532