Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x76g-hhwp-675p

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf.

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf.

EPSS

Процентиль: 88%
0.03686
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 16 лет назад

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf.

EPSS

Процентиль: 88%
0.03686
Низкий

Дефекты

CWE-200