Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mangati NovoSGA User Creation new weak password
Vulnerability Description
A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.users/new of the component User Creation Page. Executing manipulation of the argument Senha/Confirmação da senha can lead to weak password requirements. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is regarded as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
弱口令要求
Vulnerability Title
Mangati NovoSGA 安全漏洞
Vulnerability Description
Mangati NovoSGA是巴西Mangati公司的一个服务管理系统。 Mangati NovoSGA 2.2.12及之前版本存在安全漏洞，该漏洞源于对用户创建页面中参数Senha/Confirmação da senha的错误操作，可能导致弱密码要求。
CVSS Information
N/A
Vulnerability Type
N/A