ThingsBoard 3.4.1 could allow a... CVE-2023-26462

- AV AC AU C I A
发布: 2023-02-23
修订: 2023-08-29

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)

0%
暂无可用Exp或PoC
当前有1条受影响产品信息