Описание
An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution.
Ссылки
- Product
- ExploitPatchThird Party Advisory
- Product
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:prise:adas:1.7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.03102
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution.
EPSS
Процентиль: 86%
0.03102
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-94