Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cygnux sysPass 安全漏洞
Vulnerability Description
Cygnux sysPass是一款开源的多用户密码管理器，它具有安装简单、界面清晰和多用户选择等特点。 Cygnux sysPass 2.1.7及之前的版本中的javascript文件包含功能存在本地文件包含漏洞。攻击者可利用该漏洞读取配置文件。
CVSS Information
N/A
Vulnerability Type
N/A