CVE-2025-67418: Clipbucket: sabit kodlanmış kimlik bilgisi

Açıklama (NVD)

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative control of the application.

Özet bilgiler

Ürün

Oxygenz Clipbucket

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,51 (yüzdelik 44)

CWE

CWE-798

Yama

Geçici çözüm

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• medium.com
• CWE-798