CVE-2023-33730

9.8CRITICAL

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user

发布于: 5/31/2023更新于: 1/10/2025
在NVD查看在MITRE查看

描述

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

AI分析AI驱动

受影响产品

escanavescan_management_console
14.0.1400.2281

参考资料