Описание
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.2 (исключая)
cpe:2.3:a:psyprax:psyprax:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00279
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-1188
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
EPSS
Процентиль: 51%
0.00279
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-1188