Beveiligingsadvies

CVE-2024-5514

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-30 02:14:46

Laatst bijgewerkt 2024-11-25 03:04:51

Toegewezen door twcert

CVSS-score 9.8

Status PUBLISHED

Beschrijving

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without being recorded in the system logs.

← Alle CVE's bekijken Bekijk op cve.org ↗