CVE-2021-42370

Опубликовано: 08 нояб. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Низкий

Описание

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)

Ссылки

https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx
Third Party Advisory
https://lpar2rrd.com/note730.php
Release Notes
Vendor Advisory
https://stor2rrd.com/note730.php
Release Notes
Vendor Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx
Third Party Advisory
https://lpar2rrd.com/note730.php
Release Notes
Vendor Advisory
https://stor2rrd.com/note730.php
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*

Версия от 7.21 (включая) до 7.30 (исключая)

cpe:2.3:a:xorux:stor2rrd:*:*:*:*:*:*:*:*

Версия от 7.21 (включая) до 7.30 (исключая)

EPSS

Процентиль: 39%

0.00176

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-312

Связанные уязвимости

GHSA-pv69-ph5f-43vx