Lucene search
PRIOn knowledge basePRION:CVE-2022-35866HistoryAug 03, 2022 - 4:15 p.m.
Authentication flaw
2022-08-0316:15:00
PRIOn knowledge base
www.prio-n.com
8
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MySQL server. The server uses a hard-coded password for the administrator user. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17139.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vinchin_backup_and_recovery | eq | 6.5.0.17561 |
Related
cve
cve
CVE-2022-35866
2022-08-03 16:15:08
zdi
zdi
cvelist
cvelist
CVE-2022-35866
2022-08-03 00:00:00
nvd
nvd
CVE-2022-35866
2022-08-03 16:15:08
packetstorm
packetstorm
Vinchin Backup And Recovery 7.2 Default MySQL Credentials
2024-01-26 00:00:00