返回 CVE 瀏覽器

CVE-2021-29397

HIGH

7.5

CVSS Severity Score

EPSS Score0.0830%

EPSS Percentile3.83th

Published2022年2月4日

Last Modified2024年11月21日

Vulnerability Description

Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transmitted in cleartext over HTTP.

Affected Platforms (CPE)

📦

Globalnorthstar

Northstar Club Management

= 6.3

References & Advisories

🔗 https://Ardent-Security.com

🔗 https://ardent-security.com/en/advisory/asa-2021-05/

🔗 https://Ardent-Security.com

🔗 https://ardent-security.com/en/advisory/asa-2021-05/

相關漏洞威脅

CVE-2021-293939.8

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote ...

CVE-2021-293969.8

Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to u...

CVE-2021-293957.5

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remot...

CVE-2021-293946.5

Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote...