PT-2026-95936 · Aiyiyi121 · Sxdevops
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
aiyiyi121 SxDevOps versions 1.0 through 1.1
Description
A remote attack is possible due to the use of hard-coded credentials within the
ensure default superuser() function located in the rbac/services.py file.Recommendations
Apply the patch with identifier 2b4bf8585c3e731e7a8af30801ea46680bc783f9 for versions 1.0 through 1.1.
Exploit
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sxdevops