2 matches found
CVE-2022-0862: Insufficiently Protected Credentials
A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote attacker to change the password of a compromised session without knowing the existing user's password. This functionality was removed from...
5.3CVSS6AI score0.00671EPSS
SaveExploits0References3
PT-2021-28388
Name of the Vulnerable Software and Affected Versions: sass-rs affected versions not specified Description: The issue concerns the sass-rs crate, which is no longer maintained due to libsass being deprecated. Recommendations: At the moment, there is no information about a newer version that...
5.7AI score
SaveExploits0References4
20