Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8q7-623v-pvjv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.

EPSS

Процентиль: 89%
0.04538
Низкий

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.

EPSS

Процентиль: 89%
0.04538
Низкий

Дефекты

CWE-522