Описание
TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:tft_gallery:tft_gallery:0.10:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.12875
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.
EPSS
Процентиль: 94%
0.12875
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other