CVE-2021-38696

Опубликовано: 18 янв. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.

Ссылки

http://www.infoma.net/index.php/saraban/
Product
https://orangeo.tech/post/2021/12/24/First-CVEs.html
Exploit
Third Party Advisory
URL Repurposed
https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
Product
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
Exploit
Third Party Advisory
http://www.infoma.net/index.php/saraban/
Product
https://orangeo.tech/post/2021/12/24/First-CVEs.html
Exploit
Third Party Advisory
URL Repurposed
https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
Product
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:softvibe:saraban:1.1:*:*:*:*:infoma:*:*

EPSS

Процентиль: 57%

0.00351

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-43q6-3r5v-55cg