Описание
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
Ссылки
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dbsyncer_project:dbsyncer:2.0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00433
Низкий
7.5 High
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 7.5
github
больше 1 года назад
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
EPSS
Процентиль: 36%
0.00433
Низкий
7.5 High
CVSS3
Дефекты
CWE-284