Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:5 p.m.10 views

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

3.3CVSS6.4AI score0.00247EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/26 12:0 a.m.20 views

NCH Reflect CRM Information Disclosure Vulnerability

An information disclosure vulnerability exists in NCH Reflect CRM, a customer relationship management software. The vulnerability stems from a failure to add valid access to configuration files and a failure to validate user permissions, which could be exploited by a local attacker to discover...

3.3CVSS1.1AI score0.00247EPSS
Exploits1References1
NVD
NVD
added 2021/07/25 9:15 p.m.17 views

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

3.3CVSS0.00247EPSS
Exploits1References2
Prion
Prion
added 2021/07/25 9:15 p.m.17 views

Design/Logic Flaw

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

2.1CVSS3.8AI score0.00247EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/07/25 8:8 p.m.73 views

CVE-2021-37468

CVE-2021-37468 affects NCH Reflect CRM 3.01. The vulnerability enables local users to disclose plaintext user account information by reading configuration files, due to inadequate access control and insecure storage of credentials in configuration data. Impact is information disclosure with local...

3.3CVSS3.8AI score0.00247EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/25 8:8 p.m.19 views

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

4.1AI score0.00247EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.6 views

NCH Reflect CRM 信息泄露漏洞

An information disclosure vulnerability exists in NCH Reflect CRM, a customer relationship management software. The vulnerability stems from a failure to add valid access to configuration files and a failure to validate user permissions, which could be exploited by a local attacker to discover...

3.3CVSS5.5AI score0.00247EPSS
Exploits1References3
Rows per page
Query Builder