Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w33g-cw2w-4vrq

Опубликовано: 26 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.

EPSS

Процентиль: 59%
0.00375
Низкий

8.8 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.

EPSS

Процентиль: 59%
0.00375
Низкий

8.8 High

CVSS3

Дефекты

CWE-200