PT-2018-17672 · Unknown · Easy Hosting Control Panel

Publicado 2018-05-11 · Atualizado 2019-10-03 · CVE-2018-6618

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel (EHCP) version 0.37.12.b

Description The issue allows attackers to obtain sensitive information by leveraging cleartext password storage.

Recommendations For Easy Hosting Control Panel (EHCP) version 0.37.12.b, consider updating the password storage mechanism to a more secure method, such as hashed password storage, to prevent attackers from obtaining sensitive information.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-6618

Produtos afetados

Easy Hosting Control Panel

Referências · 4

• 🔥 http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-CLEARTEXT-PASSWORD-STORAGE.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/147557/Easy-Hosting-Control-Panel-0.37.12.b-Clear-Text-Password-Storage.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6618 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6618 · Aviso do Fabricante