CVE-2019-25021

Published: Feb 27, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

Affected (1)

Products: Scytl: Secure Vote

Scytl

1 product

Secure Vote

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Scytl Secure Vote	Version 2.1

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://suid.ch/research/CVE-2019-25021.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://suid.ch/research/CVE-2019-25021.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.