Lucene search
+L

2 matches found

OSV
OSV
added 2023/07/25 1:53 p.m.44 views

GHSA-VF78-3Q9F-92G3 Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

10CVSS8.7AI score0.00646EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2023/07/25 1:53 p.m.2470 views

Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

9.1CVSS6.5AI score0.00646EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder