CVE-2017-1000192

Published: Nov 17, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Affected (1)

Products: Cygnux: Syspass

Cygnux

1 product

Syspass

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cygnux Syspass	Up to 2.1.7

References (2)

https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

Timeline

No history available yet.