7.5

CVE-2021-42370

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xorux ≫ Lpar2rrd Version >= 7.21 < 7.30
Xorux ≫ Stor2rrd Version >= 7.21 < 7.30
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.483
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx
Third Party Advisory
https://lpar2rrd.com/note730.php
Vendor Advisory
Release Notes
https://stor2rrd.com/note730.php
Vendor Advisory
Release Notes