CVE-2023-25131

Mô tả

Tham khảo

• cyberpower.com/global/en/product/sku/powerpanel_business_for_linux · Product
• cyberpower.com/global/en/product/sku/powerpanel_business_for_mac · Product
• cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine · Product
• cyberpower.com/global/en/product/sku/powerpanel_business_for_windows · Product
• zuso.ai/Advisory · Third Party Advisory

Lỗ hổng khác của powerpanel

• CVE-2024-34025NGHIÊM TRỌNG 9.8CyberPower PowerPanel business application code contains a hard-coded set of authentication credentials. This could result in an attacker b…
• CVE-2024-33625NGHIÊM TRỌNG 9.8CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens…
• CVE-2024-32053NGHIÊM TRỌNG 9.8Hard-coded credentials are used by the  CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud. T…
• CVE-2024-32047NGHIÊM TRỌNG 9.8Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gai…
• CVE-2024-32042CAO 7.5The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwor…