CVE-2022-24860CWE-321

Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

High · published April 19, 2022

CVSS v3.1
7.4
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01684 · 76.8th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2022-04-19T23:25Z
EPSS history
Timeline
  • 19 APR 23:25Z
    Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.
    cvelistv5