CVE-2022-24860

Katalog CVE

CVSS 9.8 · Critical EPSS 1,7%

Kerentanan Use of Hard-coded Cryptographic Key pada databasir project databasir. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.

Rincian

Terbit di NVD

20 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vran-dev/databasir/blob/master/core/src/main/java/com/databasir/core/infrastructure/jwt/Jwt... exploit · advisory pihak ketiga
• https://github.com/vran-dev/databasir/security/advisories/GHSA-9prp-5jc9-jpgg advisory pihak ketiga
• https://user-images.githubusercontent.com/75008428/163742517-ecc1c787-1ef6-4df9-bdf2-407b2b31e111.png advisory pihak ketiga
• https://user-images.githubusercontent.com/75008428/163742566-a69c91e8-db20-4058-8967-1cfe86facc6d.png advisory pihak ketiga
• https://user-images.githubusercontent.com/75008428/163742596-5c13153a-be8f-4ce3-9681-bc68b5f7e9c5.png advisory pihak ketiga