9.8
CVE-2022-38116
- EPSS 0.95%
- Veröffentlicht 30.08.2022 05:15:07
- Zuletzt bearbeitet 21.11.2024 07:15:49
- Quelle twcert@cert.org.tw
- CVE-Watchlists
- Unerledigt
LoginLe-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password
Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Leyan ≫ Salary Management System Version < 2022-06-06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.565 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| twcert@cert.org.tw | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
https://www.twcert.org.tw/tw/cp-132-6460-2bb02-1.html