PT-2023-25451 · Phpjabbers · Phpjabbers Cleaning Business

CVE-2023-36140

·

Publicado

2023-09-11

·

Atualizado

2023-09-13

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHPJabbers Cleaning Business Software version 1.0
Description The issue concerns the lack of encryption on user passwords, allowing an attacker to gain access to all user accounts. This enables unauthorized access, potentially leading to data breaches or other malicious activities.
Recommendations For PHPJabbers Cleaning Business Software version 1.0, consider implementing password encryption to secure user accounts. As a temporary workaround, restrict access to sensitive areas of the software to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-36140

Produtos afetados

Phpjabbers Cleaning Business