← Zuruck zu CVEs
CVE-2023-31069
CRITICAL9.8
Beschreibung
An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.
CVE Details
CVSS v3.1 Bewertung9.8
SchweregradCRITICAL
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht9/11/2023
Zuletzt geandert3/3/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
tsplus:tsplus_remote_work
Schwachen (CWE)
CWE-312
Referenzen
http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html(cve@mitre.org)
https://www.exploit-db.com/exploits/51681(cve@mitre.org)
http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/51681(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.