PT-2023-15404 · Ormazabal · Ekorccp+3
CVE-2022-47561
·
Publicado
2023-09-20
·
Atualizado
2024-08-03
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
No specific software or versions are mentioned in the provided descriptions.
Description
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website. This could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insufficiently Protected Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ekorccp
Ekorrci
Ekorccp Firmware
Ekorrci Firmware