CVE-2023-2665
12.05.2023, 01:15
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.Enginsight
| Vendor | Product | Version |
|---|---|---|
| rosariosis | rosariosis | 𝑥 < 11.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-921 - Storage of Sensitive Data in a Mechanism without Access ControlThe software stores sensitive information in a file system or device that does not have built-in access control.
- CWE-922 - Insecure Storage of Sensitive InformationThe software stores sensitive information without properly limiting read or write access by unauthorized actors.
References