Описание
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
Ссылки
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dbsyncer_project:dbsyncer:2.0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.001
Низкий
7.5 High
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 7.5
github
9 месяцев назад
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
EPSS
Процентиль: 28%
0.001
Низкий
7.5 High
CVSS3
Дефекты
CWE-284