sapphireims kayıtları
sapphireims üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-798 Use of Hard-coded Credentials3
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-306 Missing Authentication for Critical Function2
- CWE-863 Incorrect Authorization1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-326 Inadequate Encryption Strength1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-25565İstismar yok | In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the porsapphireims · sapphireims · CWE-798 | Kritik9,8 | — | %2,1 | 11 Ağu 2021 |
40Planlayın | CVE-2020-25560İstismar yok | In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the porsapphireims · sapphireims · CWE-798 | Kritik9,8 | — | %2,1 | 11 Ağu 2021 |
39İzleyin | CVE-2020-25563İstismar yok | In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing Remotsapphireims · sapphireims · CWE-306 | Kritik9,8 | — | %1,5 | 11 Ağu 2021 |
39İzleyin | CVE-2020-25566İstismar yok | In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC.sapphireims · sapphireims · CWE-306 | Kritik9,8 | — | %1,5 | 11 Ağu 2021 |
35İzleyin | CVE-2020-25564İstismar yok | In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessisapphireims · sapphireims · CWE-863 | Yüksek8,8 | — | %1,2 | 11 Ağu 2021 |
35İzleyin | CVE-2017-16630İstismar yok | In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Inssapphireims · sapphireims · CWE-732 | Yüksek8,8 | — | %0,8 | 11 Ağu 2021 |
31İzleyin | CVE-2020-25561İstismar yok | SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server.sapphireims · sapphireims · CWE-798 | Yüksek7,8 | — | %0,3 | 11 Ağu 2021 |
30İzleyin | CVE-2017-16629İstismar yok | In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type ofsapphireims · sapphireims · CWE-209 | Yüksek7,5 | — | %1,1 | 11 Ağu 2021 |
30İzleyin | CVE-2017-16632İstismar yok | In SapphireIMS 4097_1, the password in the database is stored in Base64 format.sapphireims · sapphireims · CWE-326 | Yüksek7,5 | — | %0,6 | 11 Ağu 2021 |
26İzleyin | CVE-2017-16631İstismar yok | In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Referencsapphireims · sapphireims · CWE-732 | Orta6,5 | — | %0,6 | 11 Ağu 2021 |
26İzleyin | CVE-2020-25562İstismar yok | In SapphireIMS 5.0, there is no CSRF token present in the entire application.sapphireims · sapphireims · CWE-352 | Orta6,5 | — | %0,5 | 11 Ağu 2021 |
- CVE-2020-2556540Planlayın
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por
KritikCVSS 9,8İstismar yokEPSS %2sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556040Planlayın
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por
KritikCVSS 9,8İstismar yokEPSS %2sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556339İzleyin
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing Remot
KritikCVSS 9,8İstismar yokEPSS %1sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556639İzleyin
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC.
KritikCVSS 9,8İstismar yokEPSS %1sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556435İzleyin
In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessi
YüksekCVSS 8,8İstismar yokEPSS %1sapphireims · sapphireims11 Ağu 2021
- CVE-2017-1663035İzleyin
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Ins
YüksekCVSS 8,8İstismar yokEPSS %0sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556131İzleyin
SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server.
YüksekCVSS 7,8İstismar yokEPSS %0sapphireims · sapphireims11 Ağu 2021
- CVE-2017-1662930İzleyin
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of
YüksekCVSS 7,5İstismar yokEPSS %1sapphireims · sapphireims11 Ağu 2021
- CVE-2017-1663230İzleyin
In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
YüksekCVSS 7,5İstismar yokEPSS %0sapphireims · sapphireims11 Ağu 2021
- CVE-2017-1663126İzleyin
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Referenc
OrtaCVSS 6,5İstismar yokEPSS %0sapphireims · sapphireims11 Ağu 2021
- CVE-2020-2556226İzleyin
In SapphireIMS 5.0, there is no CSRF token present in the entire application.
OrtaCVSS 6,5İstismar yokEPSS %0sapphireims · sapphireims11 Ağu 2021