CVE-2015-7914

Опубликовано: 06 фев. 2016

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Низкий

Описание

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.

Ссылки

http://seclists.org/fulldisclosure/2016/Feb/25
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
Third Party Advisory
US Government Resource
http://seclists.org/fulldisclosure/2016/Feb/25
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:sauter:moduweb_vision:*:*:*:*:*:*:*:*

Версия до 1.5.5 (включая)

EPSS

Процентиль: 73%

0.00777

Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-8g8p-p3xc-4fjm

CVSS3: 8.1

github

больше 3 лет назад