Hardcoded credentials

2020-05-0403:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

Calibre-Web 0.6.6 allows authentication bypass because of the ‘A0Zr98j/3yX R~XHH!jmN]LWX/,?RT’ hardcoded secret key.

CPENameOperatorVersion
calibre-webeq0.6.6

CPE	Name	Operator	Version
	calibre-web	eq	0.6.6

References

github.com/janeczku/calibre-web/pull/1337