CRITICAL🇵🇱 Wersja polska

CVE-2023-37756

CVSS 9.8v3.1pub. 2023-09-14upd. 2024-11-21

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • I Doit

    APP
    I-Doit
    ≤ 25
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-37755CRITICAL9.8ten sam produkt

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator creden...

CVE-2019-1010248CRITICAL9.8ten sam produkt

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql data...

CVE-2019-25582HIGH7.1ten sam produkt

i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to down...

CVE-2019-25581HIGH8.8ten sam produkt

i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi...

CVE-2024-8749HIGH8.8ten sam produkt

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a spec...