CVE-2023-26462

2023-02-2300:00:00

mitre

www.cve.org

thingsboard

hard-coded service credentials

insecure format

remote attacker

elevated privileges

privilege escalation

application server

source code

8.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

JSON

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)