Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxg7-747h-w72j

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 5.9

Описание

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account.

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account.

EPSS

Процентиль: 17%
0.00054
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-294

Связанные уязвимости

CVSS3: 5.9
nvd
4 месяца назад

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account.

EPSS

Процентиль: 17%
0.00054
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-294