Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xgw8-47vc-hmfh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files that contained the configuration parameters were accessible. These files contained sensitive information, such as users, community strings, and other passwords configured in the printer.

All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files that contained the configuration parameters were accessible. These files contained sensitive information, such as users, community strings, and other passwords configured in the printer.

EPSS

Процентиль: 26%
0.0009
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
nvd
почти 6 лет назад

All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files that contained the configuration parameters were accessible. These files contained sensitive information, such as users, community strings, and other passwords configured in the printer.

EPSS

Процентиль: 26%
0.0009
Низкий

Дефекты

CWE-200