Описание
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.
Ссылки
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:silverstripe:silverstripe:2.4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00351
Низкий
1.9 Low
CVSS2
Дефекты
CWE-255
Связанные уязвимости
debian
почти 14 лет назад
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 ...
github
около 4 лет назад
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.
EPSS
Процентиль: 28%
0.00351
Низкий
1.9 Low
CVSS2
Дефекты
CWE-255