PT-2023-13737 · Unknown · Fighting Cock Information System

Hopscotch · Publicado 2023-04-26 · Atualizado 2023-05-04 · CVE-2022-39989

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fighting Cock Information System version 1.0

Description An issue was discovered in the system, which uses default credentials but does not force nor prompt administrators to change these credentials.

Recommendations For Fighting Cock Information System version 1.0, consider changing the default credentials immediately and ensure that administrators are prompted to update their credentials to prevent unauthorized access. As a temporary workaround, restrict access to the system until the default credentials are changed.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2022-39989

Produtos afetados

Fighting Cock Information System

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-39989 · Aviso do Fabricante
• https://sourcecodester.com/php/12824/fighting-cock-information-system.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-39989 · Nota de Segurança
• https://gist.github.com/0xHop/43c4da65e0d101328a46b1bd5a11b262 · Nota
• https://gist.github.com/0xHop/6ed962a1978edb1bd620c9c487400403 · Nota
• https://t.me/cibsecurity/62897 · Publicação no Telegram