Description (CNA)
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.adas-sso.com/es/extra/download.php
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
ADP enrichment
No English description supplied.