CVE-2017-1000192 | BDVDB-2026-93128 Detail

Description#

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901

Exploit#

No public exploit known

History#

Version 12017-11-17Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.