Description (CNA)
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FunnyWolf / Viper | affected 3.1.0; affected 3.1.1; affected 3.1.2; affected 3.1.3; affected 3.1.4; affected 3.1.5; affected 3.1.6; affected 3.1.7; affected 3.1.8; affected 3.1.9; affected 3.1.10; affected 3.1.11 |
CWE
CWE-798, CWE-259
References
- https://vuldb.com/vuln/416236
- https://vuldb.com/vuln/416236/cti
- https://vuldb.com/cve/CVE-2026-108584
- https://vuldb.com/submit/956815
- https://github.com/Randark-JMT/vulnerability-reports/blob/main/advisories/2026-09-02-viper-docker-git-credential-leak.md
ADP enrichment
No English description supplied.
No references supplied.