CVE-2021-42949

Опубликовано: 16 сент. 2022

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.

Ссылки

https://github.com/dhammon/HotelDruid-CVE-2021-42949
Third Party Advisory
https://github.com/dhammon/Security
Broken Link
https://www.hoteldruid.com/
Product
Vendor Advisory
https://github.com/dhammon/HotelDruid-CVE-2021-42949
Third Party Advisory
https://github.com/dhammon/Security
Broken Link
https://www.hoteldruid.com/
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:digitaldruid:hoteldruid:3.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.36793

Средний

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVE-2021-42949

CVSS3: 9.8

ubuntu

больше 3 лет назад

The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.

CVE-2021-42949

CVSS3: 9.8

debian

больше 3 лет назад

The component controlla_login function in HotelDruid Hotel Management ...

GHSA-87g3-rx63-rrch

CVSS3: 9.8

github

больше 3 лет назад

The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.

EPSS

Процентиль: 97%

0.36793

Средний

9.8 Critical

CVSS3

Дефекты

CWE-287