Описание
The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phppointofsale:php_point_of_sale:19.0:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00139
Низкий
4.9 Medium
CVSS3
Дефекты
CWE-916
CWE-311
Связанные уязвимости
CVSS3: 4.9
github
больше 3 лет назад
The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.
EPSS
Процентиль: 35%
0.00139
Низкий
4.9 Medium
CVSS3
Дефекты
CWE-916
CWE-311