CVE-2021-3131

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter

published January 13, 2021

CVSS
—
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00965 · 61.3th percentile
Published
2021-01-13T15:46Z
EPSS history
Timeline
  • 13 JAN 15:46Z
    The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter
    cvelistv5