Описание
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.8 (включая) до 6.0 (включая)
cpe:2.3:a:omicard_edm_project:omicard_edm:*:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02552
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-798
CWE-798
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
EPSS
Процентиль: 85%
0.02552
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-798
CWE-798