CVE-2022-24860
Assigner: GitHub_M
Published: 2022-04-19T23:25:27
State: PUBLISHED
affected: product: databasir
vendor: vran-dev
versions: status: affected
version:  > 1.0.1
descriptions: value: Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
type: CWE
source: advisory: GHSA-9prp-5jc9-jpgg
discovery: UNKNOWN
title: Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.