PT-2023-13737 · Unknown · Fighting Cock Information System

Hopscotch · Published 2023-04-26 · Updated 2023-05-04 · CVE-2022-39989

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fighting Cock Information System version 1.0

Description An issue was discovered in the system, which uses default credentials but does not force nor prompt administrators to change these credentials.

Recommendations For Fighting Cock Information System version 1.0, consider changing the default credentials immediately and ensure that administrators are prompted to update their credentials to prevent unauthorized access. As a temporary workaround, restrict access to the system until the default credentials are changed.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2022-39989

Affected Products

Fighting Cock Information System

References · 6

• https://osv.dev/vulnerability/CVE-2022-39989 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39989 · Security Note
• https://sourcecodester.com/php/12824/fighting-cock-information-system.html · Note
• https://gist.github.com/0xHop/43c4da65e0d101328a46b1bd5a11b262 · Note
• https://gist.github.com/0xHop/6ed962a1978edb1bd620c9c487400403 · Note
• https://t.me/cibsecurity/62897 · Telegram Post