PT-2023-11731
CVE-2020-24804
·
تاريخ النشر
2023-08-11
·
تاريخ التحديث
2023-08-17
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
cms-dev/cms version 1.4.rc1
Description
The issue allows attackers to gain sensitive information via audit logs due to a plaintext password vulnerability in AddAdmin.py.
Recommendations
For version 1.4.rc1, consider disabling the AddAdmin.py script until a patch is available to prevent attackers from gaining sensitive information. Restrict access to audit logs to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾