Описание
Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.0.33.0 (исключая)
cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00415
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-522
Связанные уязвимости
github
больше 3 лет назад
Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.
EPSS
Процентиль: 61%
0.00415
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-522