8
CVE-2023-28441
- EPSS 0.21%
- Veröffentlicht 24.03.2023 00:15:15
- Zuletzt bearbeitet 21.11.2024 07:55:04
- Quelle security-advisories@github.com
- CVE-Watchlists
- Unerledigt
LoginsmartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesn't occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Invernyx ≫ Smartcars 3 Version < 0.5.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.437 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| security-advisories@github.com | 8 | 2.5 | 5.5 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.