Lucene search
GoogleOSV:CVE-2022-37857HistorySep 08, 2022 - 4:15 p.m.
CVE-2022-37857
2022-09-0816:15:08
Google
osv.dev
3
cve-2022-37857
hauk v1.6.1
hardcoded password
config.php
server-side
android client
clear-text
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
48.3%
bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default.
Related
nvd
nvd
CVE-2022-37857
2022-09-08 16:15:08
cvelist
cvelist
CVE-2022-37857
2022-09-08 15:17:18
prion
prion
Hardcoded credentials
2022-09-08 16:15:00
cve
cve
CVE-2022-37857
2022-09-08 16:15:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
48.3%
Related for OSV:CVE-2022-37857