3 matches found
Hardcoded credentials
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...
7.5CVSS9.2AI score0.13518EPSS
SaveExploits0References3Affected Software1
CVE-2022-35413
WAPPLES Web Application Firewall
9.8CVSS9.3AI score0.13518EPSS
SaveIn wildExploits0References3Affected Software1
CVE-2022-35413
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...
9.6AI score0.13518EPSS
SaveExploits0References3
20