Описание
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.
Ссылки
- Broken LinkPatchVendor Advisory
- Broken LinkVendor Advisory
- Broken Link
- Broken LinkThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- Broken Link
- Broken LinkPatchVendor Advisory
- Broken LinkThird Party AdvisoryVDB EntryVendor Advisory
- Broken LinkPatchThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken LinkPatchVendor Advisory
- Broken LinkVendor Advisory
- Broken Link
- Broken LinkThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- Broken Link
- Broken LinkPatchVendor Advisory
- Broken LinkThird Party AdvisoryVDB EntryVendor Advisory
- Broken LinkPatchThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 2.53 (исключая)
cpe:2.3:a:netsourcecommerce:productcart:*:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05574
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-326
Связанные уязвимости
CVSS3: 7.5
github
почти 4 года назад
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.
EPSS
Процентиль: 90%
0.05574
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-326